InfoWorld - Security Adviser: The catastrophic state of security in 2014

Can a mega security disaster be avoided? Not if we continue to accept the poor security practices and consequences that persist today

By Roger A. Grimes
Dec 2, 2014

Not long before 9/11, there were attempts to strengthen airport security, which could be foiled all too easily. These efforts were stymied by arguments that more extensive measures were unnecessary and would increase costs to unacceptable levels.

If you ask me, we're in a similar situation now. Computer security in 2014 is in a terrible state. Breach after breach occurs, but proposed solutions either fall short or incur so much cost and inconvenience, organizations refuse to implement them.

I'd like for us to develop a significantly safer Internet without needing an apocalyptic event to prod us to action, but I don't hold out much hope. I've been fighting cyber crime for nearly three decades, and every year it gets worse. Let's review the awful state of affairs we face today:

Click the URL above to read the full article