Why don't companies buy more secure software?
Balancing security and functionality is nothing new. But is there a way to fairly allocate the security costs to the users who benefit from the functionality? We ask the LinuxWorld OpenSolutions Summit keynote speaker Bruce Schneier.
You know those of us in the security industry have been wringing our hands over that question for years, for decades. Why donít they do it? There are a couple of reasons. The first is -- itís sometimes hard to tell what a secure product is. I can hold up two products; they use the same buzzwords. They have the same protocol standards. What is secure, and what isnít? And you donít know. And these might be security products. These might be networking products or office products. Itís very hard to tell what a secure product is and what an insecure product is.
[ Read more ]