At the annual security RSA Conference, the focus was all things cloud
At the annual security RSA Conference, the focus was all things cloud. Forget for a moment that definitions of “cloud” are still in flux, or that aside from SaaS, the adoption rate is still in the margin-of-error range (just 2% of benchmark participants told Nemertes in 2009 they were currently deploying cloud services). Indicators point to strong enterprise interest—and this time, the security industry is not waiting for the horse to leave the stable. Security experts are rightly focusing on the tried-and-true fundamentals: Identity-centric and data-centric security, the shrinking perimeter-of-one, audit, assessment and assurance. Specific technologies like SAML, OATH, Virtsec (virtualized security controls) and others are paving the way. So even if the cloud, whether Infrastructure-as-a-service (IAAS), platform-as-a-service (PAAS) or software-as-a-service (SAAS) may not be compliance ready, but it is certainly test and development ready and able to support niche production applications.
