Nick Selby in the Press

One can only media-whore so much, but I am trying.

SC Magazine | Second tier vendors to challenge McAfee, Symantec on endpoint security
A new breed of security vendor is set to challenge McAfee and Symantec over endpoint security, according to a leading security analyst. Nick Selby, research director for analyst firm The 451 Group, said the processing requirements of McAfee's and Symantec's products had become huge, and that considerable numbers of businesses had switched to second tier vendors. [Read article]
Red Herring | Open Source's Sourcefire Balks at Barracuda
Sourcefire, whose $225 million acquisition by Checkpoint Software was blocked by Washington in 2006, Friday rebuffed a $187.4 million takeover bid by Barracuda Networks. "It is certainly an opportunistic offer, as FIRE has been burned on Wall Street," said analyst Nick Selby. "A stiff-arm bid for your company from a CEO named Drako at a company called Barracuda has Harry-Potterian overtones, but the bid is consistent with Barracuda's overall marketing strategy. [Read article]
Network World | Bogus security promises and how to detect them
What is true enterprise security and how do you get it? Bogus promises by vendors are all too common. In this recent Network World chat, outspoken security analyst Nick Selby humorously tackles the truth about data leakage products, smartphone protection, hotspot threats and the word "solution." Nick Selby leads The 451 Group's Enterprise Security Practice. Selby also serves as The 451 Group's Director of Research Operations and is on the faculty of the Institute for Applied Network Security. [Read article]
Blogging Stocks/Motley Fool | Haute Secure: free antivirus software?
For companies like Symantec and McAfee, the antivirus software industry is quite lucrative - and still growing quite nicely. So, it should be no surprise that competitors want a piece of the action. Nick Selby, who is the director of the enterprise security practice at The 451 Group, said, "As drive-by downloads and malicious code appears on increasing numbers of websites, these kinds of technologies are proliferating. Companies such as Grisoft (formerly AVG) recently acquired Exploit Prevention Labs, which works in a similar fashion, for what we reckon was under $10m, and others, such as Finjan, McAfee and Symantec are pushing their entries in this space." [Read article]
Dark Reading | Survey: Enterprises Don't Know Sensitive Data Flow
Most enterprises still don't know where their sensitive data resides, and less than half of those that do know are actually enforcing its protection, according to new research to be released next month by The 451 Group. "Seventy-five percent don't know who their employees are talking to," says Nick Selby, director of research operations and research director of enterprise security for The 451 Group. "But this is not an IT problem -- it's a business problem." The 451 Group survey, which will be published as part of its "Mind the Data Gap" report next month, found that only 37 percent of enterprises have determined where their data physically resides in the organization. [Read article]
ARN | Prototype software sniffs out insider threats
Researchers are developing technology they say will use data mining and social networking techniques to spot and stop insider security threats and industrial espionage.A small percentage of data that leaks from corporate networks (0.5 per cent) is stolen by professionals whose efforts will evade detection by security products touted as data-leakage prevention tools, said Nick Selby, an analyst with 451 Group who spoke at the Security Standard event last year. The products do catch data leaks, 98 per cent of which are linked to an accident or stupidity and 1.5 per cent that are caused by vengeful employees clumsily attempting to steal data, he says. [Read article]
The Industry Standard | Microsoft makes blockbuster open-source move
After decades of tenaciously guarding its protocols and APIs, Microsoft Thursday cut some major chains protecting the intellectual property of its Windows and other core enterprise products. "Microsoft says [opening up APIs] is an acknowledgment that in today's world, many more flowers bloom when platform companies make their APIs completely open for developers to write to, a la Google and Microsoft's recent investee, Facebook," 451 Group analysts Matthew Aslett, John Abbott, Nick Selby, and Vishwanath Venugopalan wrote in their commentary on the announcement. [Read article]
The Washington Post | Open APIs May Help Microsoft Repair Reputation
If Microsoft executes effectively on its new interoperability promises, it could repair its tarnished reputation in the technology industry and help the company get out of its own way to compete more effectively with Google. "[The news] validates and places a Microsoft acknowledgment that the open models that have emerged -- which Microsoft has denied almost as vociferously as tobacco companies have fought the idea that smoking causes cancer -- are a perfectly reasonable way to go," said Nick Selby, a senior analyst and research director at The 451 Group. [Read article]
CIO Magazine | Microsoft's Promise for Interoperability Provokes Doubt and Hope
Microsoft's Thursday announcement of its strategy to enhance interoperability and openness perked the ears of the software industry. But don't assume this means that the folks in Redmond all bought Birkenstocks, says Nick Selby, director of research operation for IT consultancy 451 Group. "Clearly [a major reason] Microsoft is making this move is to head off the competition from open source and open standards, which were threatening to [hurt] Microsoft." [Read article]
Network World Layer8 Blog | Prototype software sniffs out insider threats
Researchers are developing technology they say will use data mining and social networking techniques to spot and stop insider security threats and industrial espionage. Companies said that while hackers and outside threats represented the greatest threat (26%) to networked resources, current employees inside the organization were not far behind (19%). Foreign entities and ex-employees were the next greatest threats, the survey said. A small percentage of data that leaks from corporate networks (0.5%) is stolen by professionals whose efforts will evade detection by security products touted as data-leakage prevention tools, said Nick Selby, an analyst with 451 Group... [Read article]
SC Magazine | Portable device security: mobile madness
Mobility is not an option for the brokers at Integro Insurance Brokers. It's a daily requirement. How enterprises perceive and secure their mobile devices has changed dramatically in the past year, notes Nick Selby, a senior analyst and director in the enterprise security practice at The 451 Group. "We've seen an inflection point where notebooks and laptops outnumber desktop PCs. The explosion of smart phones and other Internet-capable mobile devices means we can't really draw a line between mobile and enterprise devices. They all have similar capabilities, whether they're inside or outside a corporate setting," he says. [Read article]
PC World | Cyber Espionage: A Growing Threat to Business
Cyber espionage is getting renewed attention as fresh evidence emerges of online break-ins at U.S. research labs and targeted phishing against corporations and government agencies here and abroad. Many security experts are quick to point out that just because an attack might be traced to any server in any country doesn't provide direct evidence of much since attackers may simply be controlling the servers from almost anywhere in the world. The term "open source espionage" describes the process of gathering information through readily available posted information, says Nick Selby, director of the enterprise security practice at The 451 Group. [Read article]
Network World | Cyber espionage seen as growing threat to business, government
Cyber espionage is getting renewed attention as fresh evidence emerges of online break-ins at U.S. research labs and targeted phishing against corporations and government agencies here and abroad. It's no wonder that research firm SANS Institute has ranked cyber espionage No. 3 on its "Top Ten Cyber Menaces for 2008," just behind Web site attacks exploiting browser vulnerabilities and botnets such as the infamous Storm. The term "open source espionage" describes the process of gathering information through readily available posted information, says Nick Selby, director of the enterprise security practice at The 451 Group. These days, that could be LinkedIn, Facebook, MySpace or scouring Google searches for corporate info mistakenly left exposed to the public, he points out. And it's known that some companies have put some servers out on the Internet simply to try and sniff another company's unencrypted traffic. [Read article]
TechTarget | Mobile voice encryption gets cheaper, easier to do
A new fingertip-sized voice encryption chip could lead to broader adoption of mobile device voice encryption. KoolSpan Inc. will release the TrustChip, a $300 encryption chip in an SD memory card form factor that end users themselves can slide into any Windows Mobile or Symbian device with an SD card slot. The TrustChip automatically encrypts voice data when an end user calls another TrustChip-enabled phone. Nick Selby, senior analyst and director of enterprise security at The 451 Group, said the TrustChip is more affordable and easier to use than other mobile device voice encryption technologies on the market, which could mean a huge market opportunity in the United States. "It would first be of interest to vertical markets that are highly regulated or highly competitive and so subject to industrial or corporate espionage," Selby said... [Read article]
Network World | Q&A: Data leak prevention pros and cons
Anti-data leakage vendors make bold claims about how far their products can go to protect enterprises from unauthorized information sharing. This irks Nick Selby, head of enterprise security research at The 451 Group, who believes these tools are helpful with some tasks, but far from "the solution." Selby declines to use the industry term "data-loss prevention" to describe these products because he believes such words instill a false sense of security.... [Read article]
Computerworld | Anti-botnet vendors (botreupreneurs?) plug into demand
A small group of IT security startups are hoping to cash in on the rise of the botnet scourge as businesses -- telecommunications carriers and Internet service providers, in particular -- seek new methods for stopping the attacks. "If you look at the change in the characteristics of malware attacks over the last year, and the public outrage over data breaches, private and government organizations have reached a point where the botnet issue is directly accessible," said Nick Selby, analyst at The 451 Group... [Read article]
eWeek | Code Testing Tools Could Be Acquisition Targets in '08
If application security has to be baked into the development process, source code analysis tools are the technological equivalent of oven mitts - making their providers natural targets for acquisition, some analysts predicted. "There's a lot of interest in this space because of PCI," said Nick Selby, an analyst with The 451 Group. "We're seeing an exponential increase in the number of software-as-a-service providers who are doing vulnerability assessments either for Web applications or for traditional network applications or network vulnerability assessment... [Read article]
Information Week | Security Vendors Revamp Desktop Suites
Cisco, Checkpoint, IBM, McAfee, and Symantec have spent more than $3.7bn over the past two years acquiring companies to support their vision of holistic threat management. There's a strong undercurrent of discontent with the incumbent security vendors, strong enough that large customers are more open to products from what have been considered second-tier vendors, including Kaspersky Lab, Panda Security, and Sophos. "Everyone in the enterprise world is saying, 'I thought this was fixed,' but it isn't fixed," says Nick Selby, research director for the enterprise security practice of the 451 Group. "We are getting infected by things we've never been infected by before...." [Read article]
CIO Magazine | Spot-On Security Tips for Mac OS X Leopard
Now that the honeymoon stage with Mac OS X Leopard has passed, the nuances of its daily use are beginning to come to light. What is it about Mac OS X that makes it unappealing to hackers and other Internet interlopers? Nick Selby, senior analyst and director of enterprise security practice with The 451 Group, says it's simply that hackers tend to reach for the lowest-hanging fruit... [Read article]
E-Commerce News | Grisoft Grabs LinkScanner Tech, Targets Security Heavy Hitters
Czech Republic-based IT security vendor Grisoft is buying Exploit Prevention Labs, an Atlanta company formed two years ago by security veterans Bob Bales and Roger Thompson. While EPL is not a large company, the deal with Grisoft reflects a major shake-up taking place in the industry, said Nick Selby, senior analyst and director of the enterprise security practice at The 451 Group... [Read article]
TechTarget Search SMB | Midmarket CIOs turning to log management for compliance
Midmarket firms are looking for affordable log management technology to help them deal with growing scrutiny from regulations such as the Payment Card Industry Data Security Standard and the Health Insurance Portability and Accountability Act (HIPAA). "There's an alphabet soup of regulations, but what's really been driving the need for log management is PCI," said Nick Selby, senior analyst and director of the enterprise security practice at New York-based The 451 Group. "These standards really have bite...." [Read article]
Dark Reading | New CEO Sets Whitelisting Firm's Direction
Whitelisting firm Bit9 named a new CEO today, former Corel chief operating officer Patrick Morley, who reaffirmed the company's strategy to spread its technology via partnerships with security companies, such the one it signed recently with Kaspersky Lab. Nick Selby, director of the enterprise security practice at The 451 Group, says with the pressure on agent-based endpoint security vendors intensifying, his firm expects more whitelisting and data leakage firms to be acquired next year... [Read article]
CSO Magazine | Roundup 2007: Gazing into the crystal ball
We handed out crystal balls to several analysts, consultants, professors and CSOs and asked them to answer questions about next year. The answers were candid, diverse and often cynical and comical — just as expected. Sometimes our panel is in agreement, other times diametrically opposed. But take note: Their forecasts may help prepare you for what's coming next.... [Read article]
Neuro-Linguistic Programming Blog | Fun With Gobbledygook
InfoWorld Magazine takes humorous issue with the same sort of gobbledygook despised by David Scott. Read author Matt Hines' article about security analyst Nick Selby's "BullsIT Awards", Poking Fun at Tech PR. I loved Selby's reference to Lisa Simpson of The Simpsons: "This reminds me of Lisa Simpson visiting Australia and, on seeing on a cinema a sign reading, 'Yahoo Serious Festival,' she said, ‘I know those words, but that sign makes no sense.'" [Read article]
ITToolbox Blogs | The 2007 BullsIT Award winners announced
Nick Selby posted his 2007 BullsIT Award winners and their "Tech-Flack" quotes on his blog yesterday. This award is given to those whose tech marketing comments had the most spin during 2007. Here are couple of examples: "I commit to you to let you know and keep you informed, and the analyst community informed, of this kind of information because this is a key part of our missionary market phase..." [Read article]
TheDeal.com | 451 Group: Cisco hunting for data leakage acquisitions
[A] report out from the 451 Group mulls what Cisco will need to acquire to build a comprehensive network security offering that stretches from services to software to hardware. Potential targets in other security areas include Great Bay Software, ConSentry, Nevis, Mirage, Sophos, Sourcefire and eIQnetworks, the report says. It's an expansive list, so report authors Nick Selby and Paul Roberts are bound to get at least one of their picks right... [Read article]
InfoWorld | Poking fun at tech PR
Nick Selby, a security analyst at the 451 Group, recently took the time to highlight some of the most troublesome PR missives, messages and pitches he received during 2007 -- in his blog. Here are some of the highlights/lowlights -- read them and try not to weep, and if you're an aspiring PR maven, use this as a list of marketing tactics that you and your customers may want to avoid (please!). [Read article]
CIO Sweden - IDG.se | BullsIT Awards utser IT-såkerhetens floskler
I veckan publicerades den första utgåvan av topp tio-listan BullsIT Awards, på initiativ av amerikanska säkerhetsforskaren Nick Selby. Listan utser säkerhetsleverantörernas och deras pr-byråers värsta floskler, pr-missar och språkfel under året. Och han sparar inte på krutet. På tionde plats kommenterar han exempelvis citatet "vårt erbjudande är väldigt unikt i "origination"-utrymmet" på följande sätt: "En dubbelträff: gradering av en absolut (väldigt unikt? År det ungefär som en "rund cirkel"?) och korporationsbajs. Rocka på mannen, rocka på." [Read article]
Network World | BullsIT Awards lambaste security double-talk, spin
Here's a new twist on Top 10 lists: Nick Selby today published his first annual BullsIT Awards to highlight outstanding achievements in double-talk, spin, and bad grammar by IT security vendors and their publicists. Selby, who leads enterprise security research at industry analyst firm The 451 Group and is known to speak his mind at industry events, published his BullsIT Awards on his personal blog... [Read article]
Good Morning Silicon Valley/San Jose Mercury News | Off Topic
From PsyBlog, 10 studies on why we do dumb or irrational things, Nick Selby's 2007 BullsIT Awards for the top tech-flack quotes, and the comeback of absinthe (mention of which allows me to share one more multi-pun punch line from which you can reverse-engineer the joke: "Absinthe makes the hearth glow, Fonda.") [Read article]
nickselby.com | Press Release: 2007 BullsIT Awards Released
Nick Selby has released on his personal blog The 2007 BullsIT Awards - an annotated collection of the ten most outrageous, preposterous and ludicrous claims made by vendors of information security products. The BullsIT Awards celebrates the best of the worst in vendor blather, outright tosh and outrageous flackery - from, "As always, let us know if we can offer any relevance to your knowledge base," to, "That is the secret sauce that we have with the actionable information." [Read article]
SearchSecurity | Bypassing password downfalls with single sign-on
Windows shops are looking for a means to mitigate password protection downfalls and finding it in a single sign-on environment. "I think in three years there will be an even more dramatic rise in [SSO] use in the enterprise," said Nick Selby, an analyst with The 451 Group. [Read article]
SC Magazine | What's next for the data loss prevention market?
Dan Kaplan, SC Magazine reporter, talks with Nick Selby, senior analyst at The 451 Group, about Symantec's acquisition of Vontu, and what could be next for the DLP market. This is a podcast; click through to see a charming photo of me (okay, not very) and hear a poorly-recorded but fascinating discussion of the data leakage space. [Read article]
InfoWorld TechWatch | What's the (next) deal with the DLP business?
Now that Symantec has announced its deal to acquire data leakage prevention (DLP) market darling Vontu, some security industry watchers predict M&A interest in the space will wane. But Nick Selby, analyst with the 451 Group, said potential buyers could be looking to add DLP to their products, especially if their targets can be had at a discounted price. The expert believes agent-oriented companies, like Code Green, Credant, Guardian Edge, Red Cannon, Safend and Verdasys, will sell first. [Read article]
SC Magazine | Symantec snares Vontu for $350 million
Symantec has plunged into the data-loss protection (DLP) market via the acquisition route, announcing today that it has agreed to purchase partner Vontu for $350 million. The DLP niche has become a growing star within the broader IT security market, expanding to about 35 to 40 vendors. Some experts, such as Nick Selby of The 451 Group, have said the plethora of solutions do very little to differentiate themselves from each other. [Read article]
Blogging Stocks | McAfee secures another deal
So far this year, McAfee, Inc. (NYSE: MFE) has put together a strong turnaround. Now, the company is ramping its mergers and acquisitions (M&A) efforts. "Hacker Safe is a more solid and relevant product than was SiteAdvisor in that it addresses issues to both consumers and the e-business websites they buy from. "This is a good, incrementally valuable tool in McAfee's quiver," said Nick Selby, Director of the Enterprise Security Practice at The 451 Group, "with the added bonus of helping bring the McAfee name back to the fore of the consumer market." [Read article]
Network World | Symantec to snap up Vontu?
Rumors are swirling that Symantec may acquire start-up Vontu in a deal that hardly would come as a surprise, as large security giants scramble to add data-leak prevention technology to their product portfolios. "If Symantec buys Vontu, I think it’s good news; the products do work very well together at the gateway," says Nick Selby, senior analyst and director of The 451 Group’s enterprise security practice. [Read article]
PC World | Symantec to Buy Vontu
Security software giant Symantec is preparing to announce an acquisition of Vontu, one the largest remaining independent providers of data leakage prevention software. Industry analysts said that the proposed deal makes sense for Symantec as the firm hadn't yet established a major presence in the DLP space. McAfee's acquisition of SafeBoot likely increased the pressure on Symantec to make a move quickly, said Nick Selby, analyst with The 451 Group. [Read article]
Dark Reading | Symantec to Announce Purchase of DLP Vendor Vontu
The rumors have been swirling for some time that Symantec had been courting Vontu, but now industry reports as well as industry sources close to the deal say a Symantec acquisition of the data leakage prevention company is now official and could be announced today. But there's a bigger message here. "Now the giants of anti-malware are saying 'this ADL [anti-data leakage] is our problem,'" says Nick Selby, director of the enterprise security practice at The 451 Group. [Read article]
InfoWorld | Symantec to buy DLP specialist Vontu
Officials at other independent DLP vendors said that they were unsurprised to hear of the proposed acquisition by Symantec because the deal had been heavily rumored in the past and based on the company's existing partnership with Vontu. "We believe that Symantec had been looking at Tablus earlier this year because the price of Vontu was perceived to be too high, but then EMC made its deal," said Nick Selby. "This left Symantec with the choice of a handful of DLP targets of similar size and efficacy; what Vontu did well was aggressively sell itself and build the perception that it was a market leader." [Read article]
Motley Fool | McAfee Secures Another Smart Deal
There is little confusion about McAfee. Simply put, the company has a single-minded focus on security software. A big part of fulfilling this mission is through acquisitions, with McAfee's latest purchase being Citadel Security Software. All in all, it looks like a smart deal. Nick Selby, senior analyst at The 451 Group said, "We're watching a trend merging management functions, and this deal speaks to that. Citadel's patch and remediation management will integrate well with other McAfee products, specifically including its vulnerability assessment line -- acquired from Foundstone..." [Read article]
The Street | McAfee, Symantec Prepare for Next Battle
The competition between security software rivals McAfee and Symantec is about to heat up with the two companies readying their assaults on business customers. On Monday, McAfee released a new version of its popular ePolicy Orchestrator software, which offers a centralized management console to IT managers. "Customers are demanding unified, easier-to-update and easier-to-manage products from companies," says Nick Selby, a senior analyst with independent research firm 451 Group. [Read article]
SearchWINIT.com | WSUS, security suites own patch management these days
Faced with the growing complexities of managing and securing their desktops and servers, Windows administrators have demanded more features with fewer agents from their patch product vendors in order to simplify their work. "IT buyers want unified security agents and multiple functionality because the more agents there are on the desktop, the more likelihood there is that there will be agent conflict," said Nick Selby, a security analyst for research company The 451 Group. [Read article]
Security International | Security Conference Highlights Modern-Day Threats
At the Security Standard conference, one industry expert focused on the performance aspects of the products developed by these firms. He, The 451 Group's Nick Selby, said that although anti-data leak tools were adept at identifying instances where company data was accidentally exposed, no software existed that could ultimately safeguard against intentional acts of leakage. Said Mr Selby: "My advice to vendors is to stop saying you're going to fix [the data-leak problem] when you can't; concentrate on mistake avoidance and compliance". He added that, in 98 per cent of circumstances, data leaks occurred due to "stupidity or accident". "While ADL tools can pick up these leaks, they have "no chance...with skilled professionals who have a reason to take something", he stressed. [Read article]
The Washington Post | Assessing the countless corporate security threats
Defining the most ominous security threat to businesses today isn't easy; apparently there are just too many to choose from. At The Security Standard conference held in Chicago last week, industry executives and experts took the stage to discuss the current threat landscape. During the conference, Nick Selby, senior analyst and director of The 451 Group's enterprise security practice, looked to shed some light on the true efficacy of anti data leakage products. [Read article]
RealTime Community Messaging & Web Securtity | What We Can Expect from Data Loss Prevention Tools
As the data loss protection market grows there is concern that DLP tools will be cast as a silver bullet. This is a regular problem in IT. The new kid on the block with save us all. Nick Selby, an analyst with 451 Group noted in a NetworkWorld article that within 19 months, data-leakage technology will be blended in with other products that scan network traffic. This will help some, especially small and midsized businesses that seem more ready to adopt unified threat management (UTM) tools. [Read article]
Computer World | IronPort beefs up email security appliance
IronPort Systems, a Cisco business unit, has unveiled new data-loss prevention and encryption capabilities for its email security appliances. 'Encrypting sensitive data that’s classified as such is one of the most important things that anti data leakage products can do,' says Nick Selby, senior analyst and director of The 451 Group’s enterprise security practice. [Read article]
Network World | Data-leakage prevention tools catch errors, not theft
A small percentage of data that leaks from corporate networks is stolen by professionals whose efforts will evade detection by security products touted as data-leakage prevention tools, says Nick Selby, an analyst with 451 Group. The products do catch data leaks, 98% of which are linked to an accident or stupidity and 1.5% that are caused by vengeful employees clumsily attempting to steal data, he says ... [Read article]
Dark Reading | PatchLink Retrenches for IPO With New Name; Lumension Security to go head-to-head with CA, McAfee
In what it says is in preparation for issuing an IPO by mid-2008, PatchLink today announced that it has changed its name -- to Lumension Security -- to reflect the company's expansion beyond patch management. But Nick Selby, senior security analyst for The 451 Group, says Lumension's 'new' approach isn't new to the industry. 'Our bleeding-edge end user customers - investment banks, government agencies, pharmaceutical, etc. - are already deploying the kinds of architecture PatchLink is describing...' [Read article]
Defense Systems Magazine | Still On Alert
It's a classic case of too much of a good thing. Security systems and network devices generate vast amounts of data on events that could spell trouble for an organization. Firewalls, intrusion-detection systems, intrusion-prevention systems, routers and switches all have security tales to tell. In recent years, a handful of technology approaches have emerged to deal with the data deluge. Security event management (SEM) systems provide real-time alerts on the status of network infrastructure, said Nick Selby, who analyzes security at The 451 Group, [Read article]
SC Magazine | The SIM solution
Kelly Services is now able to more quickly answer who did what when during forensics investigations of potential security leaks. "As [the SIM products] get better, and as the technology starts to meet the promises made about it in the 1990s, we've seen a democratization of the technology," says Nick Selby, the director of enterprise security practice at the 451 Group.... [Read article]
IT Week | Sourcefire reels in ClamAV
Security firm Sourcefire has snapped up the ClamAV open source antivirus application. Analysts predict that the acquisition will improve Sourcefire's position. "Almost immediately Clam will begin to see engineering and technical support from the Sourcefire team," said 451 Group senior analyst Nick Selby. [Read article]
Enterprise IT Planet | Sourcefire Takes ClamAV
Sourcefire, the company behind leading open source intrusion detection system Snort, is acquiring the open source antivirus project ClamAV. "This is an important deal with ramifications in the open source and proprietary software and enterprise security software industries," 451 Group analyst Nick Selby wrote in a blog post. [Read article]
Computer Weekly | VMware acquires HIPS provider Determina
VMware , the market leader in virtualisation software, has acquired Determina , a Silicon Valley maker of host intrusion prevention products. "Securing the integrity of the hypervisor and the guest OS is integral to the widespread enterprise adoption of virtualisation," said Nick Selby, senior analyst at The 451 Group in New York. [Read article]
Dark Reading | Sourcefire Buys Open-Source Antivirus Project
Sourcefire today announced that it has snapped up open-source antivirus project ClamAV as part of its strategy to expand into unified threat management. "This [acquisition] is a continuation of Sourcefire's trend in moving toward what it calls enterprise threat management," says Nick Selby, enterprise security analyst for The 451 Group, which estimates that Sourcefire is making $55 million in revenues despite concerns about less-than-rosy financial reports. [Read article]
The Open Road - Matt Asay | Open-source M&A market keeps going with Sourcefire buying ClamAV
Sourcefire just announced its acquisition of ClamAV. ClamAV is by most estimates the most commonly used open-source antivirus product on this planet, with over 10 million downloads (and a significant percentage). Great, great move by Sourcefire. Nick Selby over at The 451 Group has a great analysis. He writes: This is an important deal with ramifications in the open source and proprietary software and enterprise security software industries.... [Read article]
ComputerWeek | Open source security OK, experts assure SMBs
While some buyers might think security is best left to vendors of proprietary software like Symantec or SonicWall, experts says open source software can give SMBs the protection they seek. Nick Selby, senior analyst at research firm The 451 Group, said at the C-level, at least, there definitely is a bias. "The problem with open source security is the same problem that open source had in the mid-1990s: Executives can't understand the revenue model." [Read article]
Byte & Switch | RSA Takes Tablus
EMC's RSA security division continued on its acquisition tear today, announcing its intent to buy content monitoring specialist Tablus for an undisclosed fee. Analyst Nick Selby of the 451 Group estimates that RSA spent around $40 million for Tablus, adding that the vendor has been on the lookout for this type of technology for almost a year. "They did look at a lot of players [in this space], but were slowed down by the fact that there were so many." [Read article]
VideoNetDaily | Selby Speaks: Propaganda at its finest
Propaganda film: Nick Selby speaking at the Security Forum in London, July, 2007, as part of the IT Voices series. Comments about the forum, the world of enterprise security and some of the differentiators of The 451 Group when compared to other analyst firms [Read article]
Info World | Core Security flux leaves questions about direction
Penetration testing specialist Core has a large customer base but small revenue; as its executive ranks are shuffled, some wonder if the company wants to be bought out. In mid-July, company insiders divulged that two of Core's most visible leaders, CEO Paul Paget and Lead Product Manager Max Caceres, would soon be leaving the firm to pursue other opportunities. Nick Selby, a 451 Group analyst, said Core has been discounting its products to pump up its customer base, which he tabs as the actual cause for a shortage of profits. [Read article]
SearchWinIT | Bug-weary Windows shops may accept all-in-one tools
IT managers have taken on so many security tools that some of them are willing to sacrifice "best of breed" for ease of use. "Customers are certainly fed up with multiple products and agents," said Nick Selby, a security analyst with The 451 Group, a research company based in New York. "The nature of threats used to be pretty simple. They were viruses, and they had largely been dealt with. But it's getting more complex now with more threats, like Trojans, and drive-by downloads when users go to legitimate Web sites," he said. [Read article]
IT Week | Data leakage firms facing 'consolidation and death'
Sales of data leakage prevention products for servers, desktops and networks are on the rise, but enterprises should choose their vendors carefully as the market is ripe for consolidation, experts have told vnunet.com. "There is going to be a lot of consolidation and death," said Nick Selby, senior analyst at The 451 Group. [Read article]
vnunet | Postini partners may jump ship
Google's takeover of Postini could cause some of the security company's partners to rethink their positions, analysts have warned. Postini licenses much of its security technology from third parties, including antivirus software from McAfee. "Some companies are going to feel very unhappy about sharing their technology with Google," said Nick Selby, senior analyst at The 451 Group. [Read article]
BloggingStocks.com | Google strikes again: $625 million for Postini
Google Inc.'s M&A team has been busy this year. The latest deal: $625 million for Postini. For a company the size of Google, the price tag isn't big. But the deal is certainly significant. I had a chance to interview Nick Selby, who is the Enterprise Security Analyst with The 451 Group. According to him, "This is Google's biggest security acquisition to date and confirms that it is increasingly targeting the enterprise. The Postini buy also gives Google 35,000 enterprise customers." [Read article]
Dark Reading | DLP In Flux
There are more than 40 vendors currently selling data leak prevention tools, but enterprises have been slow to adopt them -- and that may be a good thing, according to a new report from The 451 Group. "It's a problem everyone understands, so they are willing to listen. You can explain it to your mom and she'll get it," says Nick Selby, senior analyst and director of the enterprise security practice at The 451 Group. [Read article]
eWeek | Analysts Predict Future of TippingPoint
3Com officials are getting ready to file an IPO by the end of the year for TippingPoint Technologies. What will happen if TippingPoint steps out on its own in the crowded IPS marrket remains to be seen. Nick Selby, an analyst at The 451 Group, said that despite constant questions about the effectiveness of IPS and IDS, the market is still strong and TippingPoint has a solid reputation in the space. [Read article]
Dark Reading | 3Com to Issue TippingPoint IPO
3Com is about to begin slowly cutting the ties with its IPS subsidiary TippingPoint: The company said it will file an IPO for TippingPoint by the end of the year. "The efficacy of IDS/IPS is always being questioned, but it remains a checkbox on many lists," says Nick Selby, a senior analyst with The 451 Group. [Read article]
TheStreet.com | IT Security IPOs On Tap
After a drought that lasted nearly three years, initial public offerings from the IT security sector are ready for their comeback. At least four private security companies are likely to go public this year. "An IPO is no longer off-limits to IT security companies," says Nick Selby, senior analyst at industry research organization, The 451 Group. At the "same time last year, we wouldn't be thinking of having this discussion," Selby says. [Read article]
Enterprise Linux News | Red Hat, Symantec to offer bundled secure server applications
Red Hat and Symantec announced the availability of two secure server bundles that certify either Red Hat Enterprise Linux or the Red Hat Application Stack with the Symantec Critical System Protection. "These bundles can be very valuable to businesses that don't have in-house experts to configure and get running security programs like host-based intrusion detection," said Nick Selby, senior analyst and director of enterprise security in the Boston offices of the 451 Group... [Read article]
Motley Fool | IBM Gets Comfy With Security
While there was no disclosure of the price tag, IBM's acquisition of Watchfire is certainly important. The deal not only boosts Big Blue's development tools unit, but also its security business. "Watchfire has great technology," said Nick Selby, a security analyst at the 451 Group, in a Fool interview. "It helps deal with security problems early in the process. This is a big help and critical for Corporate America. Why should security be something done after an application is built?" [Read article]
Dark Reading | IBM to Enter Web App Security
IBM's security shopping spree is still underway -- it said today it will acquire Web application testing company Watchfire. Although IBM is pushing the security testing side of Watchfire's business, the major chunk of Watchfire's business has been more auditing than security, says Nick Selby, a senior analyst with The 451 Group. "They had more customers for non-security stuff than security," he says. [Read article]
Motley Fool | EMC Pursues More M&A
EMC's latest purchase came Monday, purchasing Verid for an undisclosed amount -- a deal that should provide a nice boost for RSA. "With the surge in online fraud and identify theft, KBA has certainly been a high-growth business," said Nick Selby, an analyst with the 451 Group, in a Fool interview... [Read article]
Motley Fool | Google Scans for Security
To keep its growth moving, Google needs to target billion-dollar market opportunities. So why not make a play for security? "Google is always looking to fill gaps in the Internet user's experience, and if it can shove a thumb in Microsoft's eye in the process, all the better," 451 Group analyst Nick Selby recently told me. . . [Read article]
Dark Reading | VeriSign's CEO Signs Off
VeriSign started today with a bang, announcing that president and CEO Stratton D. Sclavos had stepped down from the security firm. Overall, analysts see VeriSign's change as a healthy one. "This would be a great time to stop thinking about what it wants to be and what it actually is," said Nick Selby, a senior analyst at The 451 Group... [Read article]
RSA Security | Speaking of Security Podcast
Security Information and Event Management (SIEM) is an increasingly hot topic across the Enterprise and is something RSA considers as one of the core foundations for its information-centric approach to security. Matt Buckley speaks with Nick Selby, Senior Analyst and Director of the Enterprise Security Practice for The 451 Group about SIEM in this week's podcast. (Neither Nick Selby nor The 451 Group has been directly compensated for Mr. Selby's participation in this recording.) (Listen to podcast here) [Read article]
DesktopLinux.com | How important is Dell's Linux desktop deal?
Analysts and Linux rivals alike think the news that Dell will be bringing Ubuntu Linux to consumer desktops is a good move for both Linux and Dell. The big question now is, "How important is it really?" Nick Selby, a senior analyst at The 451 Group, was upbeat about the pairing but warned that Canonical, the company behind Ubuntu, will also face a challenge. "Dell and Microsoft customers have demonstrated a willingness to pay for commercial support. That in and of itself shows the Dell deal has huge upside revenue potential for Canonical. The Dell deal, though, lives and dies by support....." [Read article]
ITBusinessEdge | Dell PCs to Ship with Ubuntu ‘Feisty Fawn’
Dell made waves when it announced it would be including pre-loaded Linux on certain PC and laptop offerings. The 451 Group’s Nick Selby raises questions: "We believe that the market is there and ready for the offering. This success of this deal, then, will hinge on two key aspects. First is Canonical’s ability to scale its end-user tech support. Second is how Canonical will react when customers, for the first time since the launch of Ubuntu, are pissed off at it..." [Read article]
Linux.com | Dude, you're getting Ubuntu
Dell and Canonical are finally making it official. Jane Silber, director of operations for Canonical, says Canonical will be working to certify certain models of Dell computers to ensure that they work with Ubuntu. The two companies are not announcing what models will ship with Ubuntu at this time, but Nick Selby, senior analyst with The 451 Group, says that there will be one notebook and three desktop systems. [Read article]
Roberto Galoppini's Commercial Open Source Software | Dell, Linux and OpenOffice: from personal use to business use
Michael Dell was recently told to run the last release of Ubuntu, coming with a flavour of OpenOffice.org on top. Today, Canonical and Dell announced a partnership to offer Ubuntu 7.04 on select desktop and notebook products. Nick Selby, from The 451 Group, is told to have said that, "there’s the chance that] Canonical might walk into something it’s never experienced before, which is consumer dissatisfaction." [Read article]
Network Security Blog | Very interesting analysis of Sourcefire's plan
Sourcefire has announced that the company will be expanding into a lot of new security specialties beyond Intrusion Detection and Intrusion Prevention. I think it's a very good move for them and builds on their existing strengths, but only time will tell if it's going to be a successful strategy. Over at SearchSecurity Nick Selby has written an interesting analysis of the Sourcefire move. I understand it a lot better having read the article. [Read article]
Tech Target Windows Media | IT managers rely on SIM tools to stay ahead of threats
Log activity can tell a lot about systems in a Windows shop, including when viruses or other malware try to gain entry. But unless IT managers can analyze the data quickly and pinpoint problems, it isn't of much help in protecting the network. [Read article]
SearchSecurity TechTarget | Sourcefire expands strategy in effort to leverage its network real estate
Sourcefire has taken a ride since its March IPO, reaping the rewards of investor enthusiasm until suffering punishment after announcing flaccid earnings projections. Just before its stock fell nearly 30% on April 9, we said it was enjoying an open source premium – investors less than accurately saw it as an open-source security company. We believe Sourcefire has useful products, good marketing and sales and a smart, aggressive roadmap. It effectively leverages its open source credibility – including the popularity of Snort, its commitment to support its open source community, and the celebrity of Marty Roesch – to its advantage. Now it must give investors an accurate picture of how it makes its money, avoiding buzz terms and hype. And, it needs to earn some money. [Read article]
The San Jose Mercury News | Maximum Security: Experts Who Keep Company Computers Safe Just As Vigilant Guarding Their Kids Online
When it comes to keeping their kids safe in the virtual world, the experts who protect corporate America's data and networks often go above and beyond the rules set by most parents. "I'm a firm believer in the human factors in security," said Nick Selby, an analyst at the 451 Group and father of a 7-year-old boy. "I don't have any automated limits on him. I'd hesitate to set them up." [Read article]
Dark Reading | 10 Hot Security Startups
Some of the brightest minds in security have hitched their wagons to new companies in recent months, and Dark Reading has come up with 10 of the hottest. "BreakingPoint hopes to crush [its competition] by combining its competence in different testing disciplines including fuzzing, penetration testing, and security assessment," says Nick Selby, senior analyst and director of the enterprise security practice at The 451 Group.... [Read article]
Enterprise Linux News | Ubuntu Linux: To the server side and beyond?
As the launch of Ubuntu "Feisty Fawn" 7.04 draws near, proponents of the Linux operating system are predicting much wider adoption of it in server environments. Analyst Nick Selby, with New York-based 451 Group, said Canonical has wisely decided to take things slowly for now. "That's the business plan of Canonical; to have enterprise support and enterprise security on both the desktop and the server," Selby said. "They know this is a long term play, and they're doing things correctly so far by building up enterprise support and certification networks." [Read article]
Bloggingstocks.com | Sourcefire burns in orbit
The IPO market is staging a comeback. But there are perils. Look at Sourcefire, which quickly moved to a high of $18.83. Investors got a rude shock yesterday as the shares plunged 29% to $12.28. According to Nick Selby, "Sourcefire has profited mightily by deftly walking a marketing line that has got investors thinking it's both a security company and an open source company." [Read article]
ipodnn | iPod proof-of-concept virus created
Researchers at a Russian-owned security firm, Kaspersky Lab, claim to have developed the first virus designed to infect an iPod itself rather than a connected computer. Analyst Nick Selby of The 451 Group suggests, however, that attacks may be a long time in coming. "There's often a long way to go from proof of concept to in-the-wild exploit." [Read article]
The San Jose Mercury News | iPod virus may signal looming threat
Researchers at security company Kaspersky Lab have created the first virus designed to infect Apple's portable media player. "When you have a product as popular as the iPod ... it's a natural target for researchers and other hackers looking for vulnerabilities to exploit," said Nick Selby, an analyst at The 451 Group in Boston.... [Read article]
Motley Fool | Sourcefire's Smokin' Debut
Online-security provider Sourcefire (Nasdaq: FIRE) priced its IPO last week at $15, topping its $12-$14 expected range. "Now, just about any organization in the U.S. that has a serious security department is running Snort," said Nick Selby, an enterprise security analyst with The 451 Group.... [Read article]
TheStreet.com | Sourcefire Goes Public
Sourcefire's success on the stock market could help other private security companies go for IPOs as a viable exit strategy. "The security industry and investors are watching this IPO with great interest," says Nick Selby, an analyst with industry research firm The 451 group. "They are looking to this as testing the waters in 2007 for the others...." [Read article]
Byte and Switch | Is Bharosa Acquisition Bait?
Whether authentication specialist Bharosa is just flirting or looking for a more lasting commitment, speculation is afoot about the startup's future. Nick Selby, a senior analyst at The 451 Group, highlighted a recent burst of activity in the transaction security space, in a note last week. "The last acquisition was Entrust's acquisition of Business Signatures for $50 million," he noted, adding that RSA also bought security startups PassMark and Cyota. [Read article]
Dayton Business Journal | New Security Guidelines in Place for Online Banking
Username, password and even mom's maiden name may no longer be enough to protect customers from online banking fraud. Nick Selby, a senior analyst and director of the enterprise security practice at The 451 Group in Boston, says banks are implementing three factors of consumer authentication. [Read article]
Dark Reading | Report: SIM Market to Heat Up
Changes in SIM technology will also bring security management and network management closer together. But that doesn't mean the security operations center (SOC) and the network operations center (NOC) will merge, says Nick Selby, senior analyst and director of the enterprise security practice at The 451 Group. "We don't believe it will be everyone whistling while they work in a converged NOC and SOC," says Selby, one of the authors of the "Security Information Management Moves Upstream" report. [Read article]
Dark Reading | Intrusic Shuttered
Intrusic, an insider threat detection vendor, has closed its doors, a company executive confirmed today. CEO James Mobley, who joined Intrusic a few months ago, says the decision to cease operations was made early last week. After Mobley joined Intrusic, the company raised $8 million in Series B funding, says Nick Selby, senior analyst with The 451 Group, which estimates Intrusic's revenues at less than $800,000 for 2005.... [Read article]
Information Security Magazine [reg reqd] | Fraud Busters
FFIEC guidelines recommend that financial institutions adopt stronger authentication and fraud detection methods for fund transfers, and situations where a customer's identity and other account information is accessed. The bad news is that the stronger authentication isn't likely to show up in consumers' hands anytime soon. "The problem with biometric authentication technologies like retina scans or fingerprint readers is that people expect them to work as flawlessly as they do on the TV show '24,' and, at this point, they're not quite there," says Nick Selby, senior analyst and head of the security practice at The 451 Group ....[free registration required] [Read article]
Motley Fool | Cisco Buying Its Way to Security
IronPort Systems was rumored to be an IPO prospect for 2007. Well, Cisco made a better offer -- an $830m purchase of the company. As Nick Selby, senior analyst of enterprise security at The 451 Group, told me, "Cisco has bought a robust and complementary product line that can address immediately a clear point of pain for large enterprises..." [Read article]
Information Week | Google Vulnerability A Sign Of Web 2.0 Weakness
Security experts see Web mail as danger for users purposely or inadvertently leaking data out of their employers' IT environments, rather than as an attack vector for malware. "Applications that your employees are going to use that are not under the control of your IT department are definitely a security concern," says 451 Group senior analyst Nick Selby.... [Read article]
Network World | Security trends for 2007
Got a data leakage problem? Here's what will and won't work to stop the flow of critical data outside the company. The 451 Group's top security analyst, Nick Selby, shares his knowledge on this week's Network World Hot Seat video. [Read article]
Motley Fool | Check Point: Small Is a Good Thing
Check Point Software (Nasdaq: CHKP) is a major player in security, with a market cap of $5 billion. So when the company announced it was spending $20 million to purchase NFR Security, it may have seemed at first like a non-event. I interviewed Nick Selby, who is a senior analyst for enterprise security at The 451 Group.... [Read article]
Dark Reading | Sourcefire Lawsuit: An IPO Distraction?
A successful Sourcefire IPO could reinvigorate firms that develop and go commercial with open source software, says Nick Selby, a senior analyst with The 451 Group. But a lawsuit -- in which NetClarity alleges Sourcefire inappropriately used its trade secrets -- could also be a major distraction to the IPO. [Read article]
Motley Fool | Check Point Is Checking Out M&A
Check Point Software (Nasdaq: CHKP), which develops security technologies, announced that it is making a big bet by spending about half its cash balance (or $586 million) on Protect Data AB. Nick Selby, a senior analyst for Enterprise Security at The 451 Group, knows this industry well. "Pointsec's flagship whole-disk encryption products protect the data on mobile phones," he told me in an interview... [Read article]
Josh Chalifour | Services and Expanding Borders, Sun, MS, Novell, Red Hat, Oracle, and the Others
Consider the 451 Group's idea that Red Hat is becoming "The Poland of Software Vendors." Is Red Hat sitting between Microsoft and Oracle initiatives, which may drive it into the ground (not that I'd characterize Poland that way–all analogies are only designed to go so far)? ... The 451 [report] quotes Mark Shuttleworth from Canonical saying their strategy is unchanged.... [Read article]
Information Week | Target Linux: While Ellison Brings The Hammer, Ballmer Wields ... The Coupon
As for how these differing styles will affect Red Hat, I'll leave that other bloggers. Charles Babcock ... compares Red Hat to a third world supplier that's daring to go beyond providing raw materials. The 451 Group's Nick Selby makes a far rougher comparison: "the flattest piece of land between two battling superpowers: the Poland of software vendors." [Read article]
OpenCulture | Will Red Hat Survive the Recent Assault?
I think that Red Hat, as a business, could be in trouble. Nick Selby from the 451 group has an interesting analysis comparing Red Hat to the "Poland of software vendors" including not just the recent Oracle and Microsoft / Novell but also some insight into how Ubuntu may contribute to Red Hat's decline.... [Read article]
Network World | The Microsoft/Novell deal
Some reaction to the deal from around the technoblogosphere (no, I didn't just write that). What do you think? Nick Selby sees it as a counter-measure to the Oracle/Red Hat folderol. But he adds: One has to wonder whether this is one of Novell's most astute move in years or its worst move ever. [Read article]
LinuxInsider | Open Source Security Player Sourcefire Going Public
While Red Hat is the original open source IPO, Sourcefire's plans are further evidence of the winning combination of open source software and the commercial business model, 451 Group Senior Analyst Nick Selby said. "Sourcefire's success has been with a platform built entirely around open technology," he explained. [Read article]
LinuxInsider | Ubuntu Unveils 'Edgy Eft' Linux Update
"From a usability standpoint, I can only say good things," said 451 Group Senior Analyst Nick Selby. "The Ubuntu development team has done simply a great job demonstrating that free software and open source software can be combined for a platform that is every bit as polished and usable as a proprietary one." [Read article]
www.LinuxInsider.com | Oracle's Looming Linux Play
The pieces are already in place for a significant Oracle-Ubuntu partnership, 451 Group Senior Analyst Nick Selby told LinuxInsider. "Oracle might see it as a reach into greenfields it couldn't get before," said Selby, who blogged about his conversation with Canonical CEO Mark Shuttleworth recently. [Read article]
InfoWorld | Mark Shuttleworth on Oracle's Linux: "Free software in a proprietary wrapper"
The 451 Group is carrying a great analysis of the Oracle Linux move by Mark Shuttleworth, founder of the leading community-based Linux distribution, Ubuntu. Also see The451's pre-Oracle announcement discussion with Mark - Mark told The 451 Group that an Oracle/Ubuntu link-up is a matter of when, not if. [Read article]
www.LinuxInsider.com | Oracle Chief Outlines 'Unbreakable Linux' Strategy
Prior to Ellison's keynote, one of the most popular scenarios for Oracle and Linux involved upstart Ubuntu, which targets the enterprise with its popular, user-friendly version of Linux. Following the announcement of Oracle's Red Hat-based Unbreakable Linux, Shuttleworth questioned whether Oracle would be successful in supporting another organization's code base, Selby reported on his blog. [Read article]
SearchOpenSource.com | Shuttleworth: Oracle-Ubuntu partnership only a matter of time
Speaking to an analyst at Oracle OpenWorld this week, Mark Shuttleworth said his company is open to a partnership with Oracle. If the partnership were brought to fruition, the move could mean that IT managers interested in running Ubuntu as part of an Oracle software stack would be receiving the same support of commercial Linux distros without the vendor lock-in or expensive support contracts, said New York-based 451 Group analyst Nick Selby, who conducted the briefing with Shuttleworth. That said, an outright buyout of Canonical by Oracle is not in the cards, according to Selby. [Read article]
Linux Watch | Ubuntu makes business moves, but no Oracle deal... yet
Despite the almost endless rumors about an Oracle deal in the works to either buy or partner with Ubuntu, no such deal, according to Shuttleworth, will be announced... yet. Still, questions remain about Ubuntu and Oracle's future. Nick Selby, an analyst for the 451 Group, for example, commented that while "The time of the call -- 4am ET / 9am BT -- didn't sound promising for a dramatic, surprise Shuttleworth cameo on stage in San Francisco similar to that at Sun earlier this year . . . [Read article]
CNET News.com | Ubuntu update is 'Edgy' on boot speed
Canonical on Thursday plans to release the new "Edgy Eft" version of its Ubuntu Linux, which includes a faster boot-up process. "It's quite impressive how mature (Ubuntu has) gotten in the short amount of time it's been around," said The 451 Group analyst Nick Selby. [Read article]
Linux Watch | Ubuntu makes business moves, but no Oracle deal... yet
Despite the almost endless rumors about an Oracle deal in the works to either buy or partner with Ubuntu, no such deal, according to Shuttleworth, will be announced... yet. Nick Selby, an analyst for the 451 Group, commented that while "The time of the call -- 4am ET / 9am BT -- didn't sound promising for a dramatic, surprise Shuttleworth cameo on stage in San Francisco similar to that at Sun earlier this year, but who knows -- Shuttleworth gets around, and could be burning off the jet lag." [Read article]
SearchSecurity | Utimaco strives for ultimate mobile encryption
With new U.S. government initiatives to protect data, data encryption on mobile devices is becoming a must-have for many firms. As The 451 Group's Nick Selby writes, German vendor Utimaco Safeware is rapidly expanding its presence in the U.S. using a compelling combination of data- and voice-encryption offerings, but it's facing plenty of competitors. [Read article]
Motley Fool | McAfee Secures Another Smart Deal
All in all, McAfee's purchase of Citadel Security Software looks like a smart deal. I interviewed Nick Selby, senior analyst and head of the security practice at The 451 Group. "We're watching a trend merging management functions, and this deal speaks to that," he said. [Read article]
Motley Fool | EMC spends billions for a secure future
"Network Intelligence is profitable and growing and already integrates with several EMC products," said Nick Selby, a senior analyst for security practices at The 451 Group. "The company's technology can also speed EMC's expansion into non-traditional security product lines in Europe, such as products marketed towards compliance with European Union directives." [Read article]
MS-NBC | EMC spends billions for a secure future
[reprint] "Network Intelligence is profitable and growing and already integrates with several EMC products," said Nick Selby, a senior analyst for security practices at The 451 Group. "The company's technology can also speed EMC's expansion into non-traditional security product lines in Europe, such as products marketed towards compliance with European Union directives." [Read article]
Dark Reading | AT&T Hackers Devised Elaborate Phishing Scam To Dupe Customers
[Reprint] It wasn't enough for hackers who hit AT&T's DSL equipment sales Web site to simply make off with some customer information; they've been using those stolen names, e-mail addresses, and credit card numbers to launch especially convincing phishing attacks against those victims. The phishing site set up by the hackers incorporates this stolen customer data in an effort to convince AT&T customers to divulge additional sensitive information, including Social Security numbers. [Read article]
InformationWeek | AT&T Hackers Devised Elaborate Phishing Scam To Dupe Customers
It wasn't enough for hackers who hit AT&T's DSL equipment sales Web site to simply make off with some customer information; they've been using those stolen names, e-mail addresses, and credit card numbers to launch especially convincing phishing attacks against those victims. The phishing site set up by the hackers incorporates this stolen customer data in an effort to convince AT&T customers to divulge additional sensitive information, including Social Security numbers. [Read article]
AOL Money and Finance | Will HP Buy McAfee or even Symantec?
I talked to Nick Selby, the senior analyst of enterprise security at The 451 Group. According to him: "It's been said that HP should look to a McAfee or Symantec to fill security gaps. We believe that HP needn't spend that much - and if it did, it would be paying a premium for anti-malware and hygiene products which it doesn't need, and which will put it in head to head competition with Microsoft in the coming year." [Read article]
Motley Fool | IBM's Busy Billions
IBM shelled out $1.3 billion for Internet Security Systems (Nasdaq: ISSX). The company's philosophy is that security cannot be handled with technology alone. Instead, it's also critical to have a top-notch team of security experts. "ISS brings strong security services management expertise, as well as a strong and complementary product line," Nick Selby told me in an interview. Selby is an enterprise security analyst at the research firm The 451 Group. [Read article]
Metasploit.com | Metasploit 411 from The 451 Group
A few weeks ago, Nick Selby of the 451 Group interviewed me for a market research report about the Metasploit Project. This report was immediately available to 451 subscribers, but not to the general public. Today, TechTarget republished this report in the form of an article for their security news column. [Read article]
Search Security | Metasploit completes license change, updates framework
The open source pen-testing platform is used nearly universally by security assessment firms -- even those that buy "competitive" products from Core, Immunity and others, but big licensing and platform changes are in the works. [Read article]
Tenable Network Security blog | Post by Ron Gula
Recently, Michael Arnone from Federal Computer Week wrote an article about various open source projects going closed source. The article mentioned Nessus, OpenBSD and Mozilla and had several quotes from industry experts. We felt some of the comments about Tenable and Nessus were taken out of context and I would like to add some commentary to them [Read article]
eCommerce Times | eBay: Just Playing it Safe
When it comes to payment options, online merchants should err on the side of caution, says Nick Selby, a senior analyst with The 451 Group. "Retailers are trying to conduct business in a medium that is known to be fraught with security risks," he notes, "and through bitter experience and trial and error, they've come up with a balance of payment methods that allow them to conduct business to as wide an audience as possible without exposing them to unnecessary risk." [Read article]
Federal Computer Week | A new direction for open source
Note: I am misquoted in this article - NS  Government and the private sector rely so heavily on open-source tools that switching to proprietary replacements — even if the new software is better — is disruptive, Selby said. At a minimum, a switch requires organizations to change administrative routines, which is not always a simple task. It could involve a more significant infrastructure overhaul, he said. [Read article]
SC Magazine | Traffic Control
How do you spell trust? Not I-P-S — at least, not if you're an enterprise security manager deploying an intrusion prevention system (IPS) for the first time. Once heralded as the "smarter" cousin of the intrusion detection system (IDS) — destined to eventually kick its kin out of the data center because of its "intelligent" ability to block, not just identify, security threats — the IPS instead has reached a sort of detente with the IDS. [Read article]
TechNewsWorld | No Clear Solution to Microsoft's Anti-Piracy Muddle
The negative public relations hit is a wake-up call for Microsoft, which must recognize the need for transparency and honesty, Nick Selby, a senior analyst who covers enterprise security for The 451 Group, told TechNewsWorld. "The real issue isn't Microsoft protecting itself against piracy, but rather the sneaky way that it was done or perceived to have been done," he said. [Read article]
SearchStorage | RSA may not be the pearl EMC thinks it is
A month ago, EMC Corp. laid out its vision to create five distinct business units, each generating at least $1 billion in sales. At the time, the division probably furthest from that threshold was EMC's information security unit, which we estimate was running at about $100 million. On June 29, EMC took a huge step toward its goal, paying $2.1 billion for encryption software provider RSA Security Inc. But the deal didn't come cheap, valuing RSA three times richer than the market values EMC, at least in terms of sales. [Read article]
Computerworld, NZ | Lock Up Your LAN
[reprint] "Most of the security problems that have scared away early adopters have been solved," says Selby. New authentication and encryption schemes (such as 802.1x for user access and the 802.11i advanced encryption standard, or AES) are more vigorous. And vendors now offer intrusion-detection products and architectural schemes that make enterprise wireless networks just as safe as wired ones. "Most of the things you’ll need to do [for security] will come from the vendor. It’s just a question of turning it on," adds Selb