I believe we're experiencing a time of great creativity in computer security, in part because many experts come from outside the security discipline. Many of today's security practitioners were trained in fields as diverse as biostatistics, divinity, economics, and cognitive science. This diversity brings interesting new perspectives to the security challenge and leads to creative interplay that results in forward progress. We've seen evidence of this in the emergence of economic theories of security, the rise of risk management and security engineering, and a shift toward process-driven approaches (vs. product sets) and software security.

By Gary McGraw at Network Magazine.

[ Read more ]