Security Midlife Crisis: Building Security in a New World
Holger Mack, Tom Schroer · IEEE Security & Privacy · 2020
Are we (the experts) fooling ourselves that our security approaches are effective or appropriate to protect today?s and future IT environments? Are our old recipes still suitable? After working in IT security for more than 20 years, we started to realize that something had fundamentally changed. We tried to match the growing expectations of customers and consumers (the market), technological development, innovations, and strategies [the cloud, the Internet of Things (IoT), and machine learning] to today?s established security approaches, measures, and tools. Change is nothing new in the IT industry, and we are used to adapting, evolving, and improving security measures to keep up. However, some of the recent and upcoming changes are so fundamental that incremental improvements no longer seem appropriate. We ended up calling this our own security midlife crisis.