InformationWeek is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
I agree that "Patches are just band-aids ", and I think that we need to take real proactive steps.
We know that the vulnerable technology has been in place on up to two-thirds of all websites for approximately two years, the damage may already be done, and organization that uses OpenSSL rushes to fix the vulnerability before hackers can steal more data.
So what can we do to try to prevent the data theft?
Waiting for better software or protocols isn't really an option. While new software will inevitably come along, there are limited guarantees, especially in the case of open-source technology such as OpenSSL, that it will be bug-free. In fact, we should expect that they will be breached.
The most viable option is proactive security of the data itself. By tokenizing or encrypting sensitive data at the point of creation or acquisition, it can be made useless to potential thieves, even in memory.
There's no perfect answer to fix years of exposure, but moving forward, adopting the most proven, vendor-backed data security solutions that protect the data itself can offer significantly reduced risk over protocols alone.
Ulf Mattsson, CTO Protegrity
State of the Cloud
Cloud has drastically changed how IT organizations consume and deploy services in the digital age. This research report will delve into public, private and hybrid cloud adoption trends, with a special focus on infrastructure as a service and its role in the enterprise. Find out the challenges organizations are experiencing, and the technologies and strategies they are using to manage and mitigate those challenges today.
Getting Started With Emerging TechnologiesLooking to help your enterprise IT team ease the stress of putting new/emerging technologies such as AI, machine learning and IoT to work for their organizations? There are a few ways to get off on the right foot. In this report we share some expert advice on how to approach some of these seemingly daunting tech challenges.
Tweet This
User Rank: Ninja
4/22/2014 | 6:12:54 PM
I would think what with the billions in bail out money that the banking cartel has taken from taxpayers that it would use some of its money to hire competent I.T. departments instead of applying another layer of million dollar bonuses to executive officers.