Defining Security 2.0 - Part 3
When the Internet was young people focused on infrastructure; the backbones. As we evolved, we shifted to network security and protecting our own LAN’s and WAN connectivity. The last decade saw a compound move up the stack to operating systems (desktops and servers) and the last few years have seen more emphasis on applications and data.
This is natural and make sense. We move our protection closer to the “value” and where we have direct control. In many cases we no longer own or control the network and these days we often don’t own the OS through hosting. In the world of “software as a service” and web 2.0, we will likely not own the applications and the data will reside outside of our physical control.
Information ownership will become blurred. IT infrastructure has become a commodity.
The balance of network security to information security will change as information ownership relationships become more complex.
Security 2.0 will have to deal with this shift. As such I see more emphasis on the security of data and information. My nomenclature is that information is the interpretation of data which is processed by applications which use OS’s and networks to communicate with people, processes and other technology.
