Experts: Application Security Is Key to Back-End Data Protection
Posted by James Rogers on January 25, 2008
NEW YORK --- Firms need to shift their focus from network to software security, particularly for source code and Web-based applications, if they want to protect their data and avoid an embarrassing data breach. This was the warning from users and security experts at an event examining cybercrime here last night.
"You realize that we will have to start using different tools to battle the enemy," warned Ted Schlein, a partner at venture firm Kleiner Perkins Caufield & Byers, during a panel discussion. "It's not your networking guys that can solve this problem, [you need to] get your engineers involved -- this whole approach could save your back-end storage."
With most firms lavishing resources on perimeter security over the last few years, hackers are increasingly targeting vulnerabilities in Web-based applications as a way to steal sensitive data on databases and back-end storage systems, according to the V.C.
"Data losses cost this country $180 billion to $200 billion a year," he told Byte & Switch, explaining that perimeter security measures such as firewalls are effectively bypassed by cyber-criminals. "It's a different set of rules and infrastructure -- corporate IT has not kept up with that [threat] because security is in the hands of the network operations people."






Add Your Comment: