Content by Varun Haran

Security Profession Must Get Younger

Varun Haran  •  February 9, 2016

Even as the demand for security professionals grows, the outflow of practitioners from the profession is greater than the influx of fresh blood, says (ISC)² CEO David Shearer. How can this trend be effectively addressed?

Will Automation Threaten Security Jobs?

Varun Haran  •  February 4, 2016

The trend across industries is that automation results in a drastic reduction of operational job roles, even as it brings in economies of efficiency. What then does automation in security mean for the profession?

How Will GRC Take on Mobility, IoT?

Varun Haran  •  February 1, 2016

Mobility and IoT are acknowledged by security practitioners to be a whole different beast when it comes to management. MetricStream's French Caldwell says that GRC likewise needs to change its paradigm to accommodate this disruption.

2016: The Year Hackers Exploit the Cloud?

Varun Haran  •  December 23, 2015

The rising profile and increasingly complex nature of cyberattacks was a major development in 2015. What are the key threats for security practitioners to be wary of in the year ahead? FireEye CTO APAC Bryce Boland shares insights.

EDR - Hunting on the Endpoint

Varun Haran  •  October 7, 2015

Security on the endpoint took a long time to move away from mere patching, hardening and anti-virus technologies. To fight advanced threats, experts say visibility on endpoints is being transformed by the advent of endpoint detection and response tools.

Targeted Attacks Becoming the Norm

Varun Haran  •  September 30, 2015

The commoditization of attack infrastructure and services in the cyber-criminal underground, and the low cost and ease of launching targeted attacks, are growing concerns that require new defense strategies, says Trend Micro's Raimund Genes.

Draft Encryption Policy Meets Swift Demise

Varun Haran  •  September 22, 2015

Amid some controversy, a national encryption policy draft was withdrawn by the Indian government within days of its release for public comment. Security experts say the draft reflects a lack of clarity and needs more work.

Human Behavior Analysis: The Next Big Thing?

Varun Haran  •  September 16, 2015

The human element has been referred to as the weakest link in the security chain. Do advances in applying analytics to human behavior hold the key to reducing risks?

The Maturing of Breach Notification

Varun Haran  •  August 19, 2015

Blue Coat CTO Dr. Hugh Thompson speaks about the future of security, the constants that need attention, and lessons to be learned from the U.S. when it comes to writing meaningful breach notification laws.

Hugh Thompson on Simplifying Security

Varun Haran  •  August 14, 2015

In a security landscape where the frenetic pace of technology has changed paradigms in ways organizations are struggling to cope with, Blue Coat's Hugh Thompson advises adopting a 'Degrees of Freedom' approach.

Security: The New Measure of Success

Varun Haran  •  August 4, 2015

"Defend everything" is not working. And as attacks get more sophisticated, attackers are innovating in ways that challenge organizations shackled by legacy security strategies, says FireEye's Bryce Boland.

Planning Your Bot Management Program

Varun Haran  •  July 30, 2015

Akamai's John Ellis talks about the quick evolution of bots and botnets, and how enterprise security leaders should deal with them now using a three-pronged approach - detection, management and mitigation.

Targeted Attacks: How Ready is Japan?

Varun Haran  •  July 30, 2015

Just how prepared are Japanese entities for dealing with the risks from targeted attacks? What are the unique considerations and the maturity level? Trend Micro's Masayoshi Someya shares his perspective.

Internet Needs a New Security Model

Varun Haran  •  July 28, 2015

If SSL goes away today, the Internet needs a security plan B, says Uniken's Chief Security Evangelist, Menny Barzilay. Innovation on the application level is what will restore trust, he believes.

Reflections on RSA APJ 2015

Varun Haran  •  July 27, 2015

RSA Conference Asia Pacific and Japan, which wrapped up last week, was a successful reflection of this region's hottest security topics. Here are some of my own observations, as well as feedback from the attendees.