Another RSA event is in the books. It was a good week, and I always find it invaluable to have conversations with the IT mangers that are in the trenches
We also ran what I would describe as a completely unscientific survey, but thought the information would be worth sharing here. We surveyed more than 300 attendees who participated in our theater presentation on Web security, to get their thoughts on a few things. One thing that stood out was their concern over social networking. 95% of the respondents said they were "concerned" (45%) or "very concerned" (40%) about "Users accessing social networking sites from the corporate network." Of course, this level of concern is to be expected at a security conference. Only 8% said they had "no concerns."
Is the high level of concern misplaced? This information, along with the general comments of many of the IT people I spoke with suggests that the biggest threat for 2008 is clear: It's the employees themselves.
Also at RSA, our chief malware researcher, Chris Boyd (aka Paperghost), held a well-attended session with CNET senior news editor Robert Vamosi covering the habits of a new generation of young hackers targeting social networking. In addition to Vamosi's coverage and Boyd's VitalSecurity blog, InfoWorld has a nice recap of the session.
