This document summarizes emerging trends in security management from 2004-2005. It outlines trends related to security management, security point solutions, and threats. Regarding security management, the document notes that compliance concerns would drive security requirements, and that enterprise vulnerability management and endpoint security solutions would emerge rapidly. It also discusses maturing security solutions like anti-spyware, desktop/network admission control, and application-specific protections. Finally, it outlines ongoing hacking trends like worms, viruses and money-driven attacks, as well as emerging threats like rented botnets, phishing, and potential web services attacks.

1. Emerging Trends in Security Management Dr Anton Chuvakin Product Management Group December 2004

2. Outline Various trends related to security management: Security Management Trends Security Point Solutions Trends Threat Trends Non-trends / Possible Trends

3. Security Management 2004-2005 Rise of compliance concerns to drive security requirements Enterprise vulnerability management Rapid emergence of endpoint security solutions and NAC-type technologies Security policy adoption complete for large organizations; enforcement lags behind

4. Security Solutions 2004-2005 Emerging and maturing solutions Anti-spyware Desktop security and network admission control Integrated ‘all-in-one’ gateways Application-specific protection (network/host) IPSs are maturing, if not matured already Wireless security Other notes Appliance form-factor is king!

5. Hacking Trends Worms and viruses still top the charts Money, money, money! Most of attacks are now money-driven Rented “Botnets” use for spam and attacks Phishing is a major scourge Wireless are more hype than reality Web services attacks will finally reach prominence in coming years

6. Feedback? Q&A? Feedback? Q&A?