Jon Oltsik Quotations

Oracle is doing a good job of addressing security in its products, but they haven't figured out how security fits into their internal processes and overall architecture,

Stealing tapes is not the most elegant, but one of the most effective attack factors. Many companies think about hacking in terms of getting root access to servers, but if they have weak physical security, someone can just walk out the door with a box of tapes.

Cartridges can sometimes be left in unmarked boxes on a loading dock next to somebody's eBay package. Often the most important data goes through the least sophisticated processes.

By the end of this year, you'll have a visible household name with an all-Linux architecture.

Within the past year the mounting public pressure for companies to secure personal data and the corresponding increase in data protection regulation have forced organizations to re-evaluate the way data is handled. Our research shows that many more are deploying encryption as a protection mechanism.

This is a relatively new technology space and people tend to deal with security in a tactical fashion. People are transitioning to take a bigger look at security. There's pretty convincing evidence that shows that a tactical approach to security doesn't work. There are more threats. There are more attack vectors. The attacks are getting nastier.

It's a wide open market, ... Cisco will be in the game, but what's gone for them is the opportunity to have a dominant propriety solution.

This research process resulted in some eye-opening and somewhat troubling conclusions. Large organizations identified security holes across a number of areas. Security processes are fair at best, and most users have not been trained on security policies and risks. I view the data from this report as a cry for help - clearly something must be done soon.

This is the year that Linux gains critical mass. It'll be very important in big Internet commerce sites.

This could certainly evolve to be an important component around network access control.