From a security perspective, companies want simple solutions. As I walked the RSA expo floor a few weeks ago, this became very apparent.
Vendors were pitching products that were among other things, "in the cloud", "self-maintained", and "auto-updated." It seems that companies are looking for simple solutions for complex problems. (Duh?)
As I walked around the exposition floor, I began to chuckle, realizing that there were more people in the Moscone center than there are attackers in the world. More money gets pumped into security products than actual money gets stolen. What an amazing idea.
Now, imagine I have a product that you can:
- Plug into your network or computer.
- Requires no "maintenance".
- Will prevent your network/computer from being attacked.
- Alert you after it has successfully prevented the attack.
My two-cents: No product or grouping of products will prevent an attack. You can do some preventative measures, however, if an attacker wants to get you, they will.
Good Luck!
