• DocumentCode
    1350182
  • Title

    Necessary but Not Sufficient

  • Author

    Potter, Bruce

  • Author_Institution
    The Shmoo Group
  • Volume
    8
  • Issue
    5
  • fYear
    2010
  • Firstpage
    57
  • Lastpage
    58
  • Abstract
    Considering where the practice of information security started, the industry has certainly progressed over the past several decades. Forty years ago, only a handful of individuals understood the core concepts of computer system security. Today there are universities with degree programs in computer security, US federal mandates regarding IT system security, and a variety of industry-specific guidelines and auditing bodies.
  • Keywords
    information technology; security of data; IT system security; computer system security; industry-specific guidelines; information security; information technology; Information security; Investments; Measurement; Programming; Workstations; APT; advanced persistent threat; corporate security; malware; security and privacy; security strategy; threat environment;
  • fLanguage
    English
  • Journal_Title
    Security & Privacy, IEEE
  • Publisher
    ieee
  • ISSN
    1540-7993
  • Type

    jour

  • DOI
    10.1109/MSP.2010.157
  • Filename
    5601488