One Security Headache, One Provider’s Gain

IT and network managers may well despise the proverbial disgruntled employee, the one who virus-bombs the LAN or smuggles confidential corporate data out the door. But security software vendor McAfee Inc. is counting on just such a ne’er-do-well to bolster its bottom line. "We’re seeing more internal threats than external threats," says Danielle Fournier, GM of McAfee’s Canadian operations, during an interview at her Markham ON office. "Lack of data protection, failing to meet audit compliance…" – these are the real threats to enterprise security, never mind the odd email virus, courtesy of your average script kiddie.Protecting against internal threats is the name of the IT security game these days. McAfee is making moves to ensure it’s a player."We recently acquired Onigma, which provides protection against data leakage," Fournier says, explaining how Onigma’s technology keeps workers from downloading sensitive company information to portable media devices, such as USB keys. "It can also tell if an employee is going to leave the company, by recognizing that the employee has downloaded a lot of information – that will usually tip off an organization that a resignation is coming."McAfee went on something of a buying spree last year, acquiring not only Onigma Ltd., but also Preventsys Inc. for security-compliance reporting tools and Citadel Security Software Inc. for "vulnerability remediation." McAfee aims to become the world’s largest IT security provider, Fournier says. Symantec Corp. has the crown now."We are about 90% there with our acquisitions, from creating policies to determining priorities, fighting vulnerabilities, remediation, data leakage and auditing and compliance," she says. "By the summer of 2007 we will have a multi-layered, multi-technology solution in effect for our customers, all integrated."And make sure you note that’s ‘dedicated’ security. Cisco is a kind of security company. Microsoft is in security. But they do multiple things. We say we’re the largest dedicated security company."But does the world still need dedicated security? Many of the protections required to keep data safe from prying eyes now reside in applications and network equipment. Microsoft Corp.’s new Vista operating system, for instance, includes some of the protections that, once upon a time, had to be purchased separately.Fournier says she recognizes the shift, but that doesn’t detract from the need for dedicated security. "We see Microsoft as the greatest operating system provider. That’s where their strength is." Read: Microsoft’s strength is not security.As it tries to become the world’s largest security provider, McAfee is learning a thing or two – that security fads come and go, for instance."The waves of security products we’ve been through – I mean, ’97 was the year of PKI," says Fournier. "This was supposed to solve everything. But no one took into account that it’s extremely resource intensive, and expensive. Then single sign-on came on. It’s really behavioural. We want it to be easier. We want it to be automated. We want the integration. But there are a lot options to consider."A few months ago it seemed McAfee was exploring its own options, shuffling executives around the C-suite. Last October CEO George Samenuk resigned and president Kevin Weiss was fired after the firm revealed US$150 million in stock option "irregularities." Dale Fuller became interim CEO.But Fournier says the executive moves haven’t affected McAfee on the ground. "It is business as usual. There has been no slow down corporately or regionally."

One Security Headache, One Provider’s Gain

News | 02/01/2007 5:00 am EST

To keep reading, get a free trial.

Already a Subscriber?

Reuse & Permissions

Inside The Wire Report

Information

Hill Times Publishing

Get in Touch With Us