The document analyzes data from the RSA conferences in 2009 and 2010. It shows the popularity of different security products and technologies at each conference. In 2010, the number of exhibitors decreased by 15% from 2009. Compliance management and enterprise security management remained the most popular topics, while interest increased significantly in areas like data security, cloud computing, and mobile security. Authentication, databases security, and access control saw larger decreases in popularity from 2009 to 2010.

1. RSA 大会数据分析 —— RSAC2009 、 2010 分析 潘柱廷 2010 年 3 月 16 日

2. 2009 年分析

3. 2009 各个领域产品的热度

4. 2009 各个领域产品的热度

5. Enterprise Security Management 76 Compliance Management 55 Authentication 47 Application Security 46 Access Control 45 Endpoint Security 45 Risk Management 41 Identity Management 40 Anti Malware 33 Intrusion Detection 28 Vulnerability Assessment 28 Policy management enforcement 26 Encryption key management 25 Compliance PCI 24 Content Filtering 24 Firewalls 24 Web Services Security 24 Database Security 22 Password Management 21 Anti Spam 20

6. Audit 19 Wireless Security Managed Security Services Messaging Security PCI Remote Access Web Filtering Cybercrime 15 Network Protocol Security Security Consulting SIEM VPN Secure File Transfer Virtualization Incident Response Security Ecommerce Configuration Patch Management 11 PKI 11 Software Code Vul. Analysis Government Standards Penetration Testing Physical Security SSO Storage Security Digital Certification Forensics Denial of Service OEM Appliance Privacy Cloud Computing Fraud Security Education Controls 5 User Awareness VOIP Security Professional Certification Research Security Operations WAN Security DLP 3 DRM Provisioning Security Jobs Digital Evidence E-Discovery Law Metrics Product Certification Visualization Cryptography Research 1 Identity Federated Legislation Lessons Learned

7. 技术的融合 云计算 虚拟化 SaaS/PaaS/IaaS 移动 SNS- 社交网络 … 以 UTM 为代表的一体化产品 ISMS 、 ITSM 、安全管理、网络管理等的互相渗透 以 Id 管理为核心的管理关联， 4A 等 生命周期前后的延展，开发 - 建设 - 运维 …

8. 2010 年分析

9. 参展厂商数量减少 2009 年参展厂商 368 2010 年离开的参展商 149 占 2009 年厂商数的 40% 2010 年新参加的参展商 75 占 2009 年厂商数的 20% 2010 年参展商 316 厂商数比 2009 年的减少 15%

10. 2009 、 2010 产品热度对比 绿 2009 ， 蓝 2010

11. 按 2009 年产品热度降序排列 绿 2009 ， 蓝 2010

12. 按 2009 年产品热度降序排列 绿 2009 ， 蓝 2010 ， 红增额

13. 按 2010 产品热度降序排列 绿 2009 ， 蓝 2010

14. 2010 年热度产品类 Compliance Management 55 Enterprise Security Management 48 Data Security 44 Cloud Computing 36 Endpoint Security 36 Application Security 36 Authentication 35 Intrusion Detection 34 Risk Management 34 Threat Management 32 Access Control 31 PCI 30 Anti Malware 30 Encryption 30 Identity Management 29 Vulnerability Assessment 28 Firewalls 24 Managed Security Services 22 Cybercrime 20 Forensics 19 Anti Spam 19 Policy management enforcement 19 Online Security 17 Content Filtering 16 SIEM 15 Audit 15 Encryption key management 15

15. 2010 热度产品降序，附红差 绿 2009 ， 蓝 2010 ， 红增额

16. 根据 2010 热度增加额排序，向下为减 绿 2009 ， 蓝 2010 ， 红增额

17. 2010 年增加最多的产品类 大部分为新增的产品类 2010 差额 Data Security 44 44 Threat Management 32 32 Encryption 30 30 Cloud Computing 36 29 Online Security 17 17 PCI 30 14 Mobile Device Security 14 14 Insider Threats 12 12 Zero Day Vulnerability 11 11 Forensics 19 10 Biometrics 10 10 Identity Theft 10 10 Security Architecture 10 10 2010 差额 Botnet 9 9 Standard 9 9 Healthcare 8 8 Governance 7 7 Hacking 7 7 Intrusion Detection 34 6 Security Education 12 6 Visualization 8 6 Exploit of Vulnerability 6 6 Web2.0 6 6 Cybercrime 20 5 DLP 8 5 Web Server Security 5 5

18. 2010 年减少最多的产品类 产品类 2009 差 Secure File Transfer 14 -5 Software Code Vul. Analysis 11 -5 Physical Security 10 -5 User Awareness 5 -5 Messaging Security 17 -6 Network Protocol Security 15 -6 Configuration Patch Management 11 -6 Risk Management 41 -7 Policy management enforcement 26 -7 Wireless Security 19 -7 Content Filtering 24 -8 Password Management 21 -8 Endpoint Security 45 -9 VPN 15 -9 2009 差 Application Security 46 -10 Encryption key management 25 -10 Identity Management 40 -11 Authentication 47 -12 Database Security 22 -12 Access Control 45 -14 Web Services Security 24 -16 Web Filtering 16 -16 Compliance PCI 24 -24 Enterprise Security Management 76 -28

19. 热度变化不大的产品类 绿 2009 ， 蓝 2010

20. 变化不大的热门产品 2009 2010 Security Ecommerce 12 12 Virtualization 14 12 Privacy 8 11 Government Standards 10 11 Security Consulting 15 11 Storage Security 10 10 Penetration Testing 10 9 SSO 10 9 Incident Response 13 9 2009 2010 Compliance Management 55 55 Anti Malware 33 30 Vulnerability Assessment 28 28 Firewalls 24 24 Managed Security Services 18 22 Anti Spam 20 19 SIEM 15 15 Audit 19 15 Remote Access 16 14

21. 变化不大的冷门产品 Security Jobs Social Engineering E-Discovery Professional Certification Research WAN Security PII Digital Evidence DRM DR/BCP Legislation Lessons Learned Metrics Fraud Security Operations PKI Denial of Service Provisioning VOIP Security OEM Appliance Digital Certification Identity Federated Product Certification Controls Cryptography Research Law