InvestorsHub Logo
icon url

bbigtim

09/28/07 2:26 PM

#152325 RE: Dutchbj #152323

Dutchbj/Good Articles

These days I'm not very impressed by the profusion of articles discussing trusted computing. The only article that I have seen recently which I thought might be good enough to have a discernable favorable effect on the bottom line was that review of the FDE drives that said glowing things about the ease of using the Wave software.

I vividly remember an exchange from years ago. I posted something about some early articles that pretty clearly demonstrated that industry gorillas were finally defining network security problems using trusted computing concepts. The gist of my post was, "They finally get it." The response by a few long-suffering Wavoids was basically, "Why should be care if the world completely accepts the Wave paradigm unless they also buy Wave products?" And they were right.

Years later industry acceptance of the Wave paradigm has become so passe that it is an unstated implicit premise of much of the discussion here. Yet, even though all of the necessary components to establish a trusted network architecture are now readily available, most of the IT guys are still sitting on their hands. Why?

I have thought this over a lot, and I think that most IT guys want to be followers rather than leaders. They have all been waiting for a few large and respected enterprise networks, or a major government agency, to deploy a complete trusted computing solution. Fortunately, I think the FDE drives are such a killer ap that they are likely to serve as a catalyst for trusted computing deployment all by themselves.

Still, it would help a lot if legislatures and courts were to stop excusing incompetence. We need the system to draw a clear line in the sand that defines failure to provide for information security as actionable negligence. Corporate managers may not understand the nuances of network configuration, but they understand the need to make prophylactic expenditures to avert big losses.