An Information Security Place

Since I get an RSA press badge through my Computerworld blog, it is kind of expected that I meet with a few of the vendors and others that are interested in getting their latest news out to the world via the press.  So I did my duty and set up some meetings. 

There are always the small guys trying to get their name out there.  The startups sometimes have a decent story because they are passionate about what they have to offer, especially if they are blazing new trails.  However, most are really just trying to jump on some security bandwagon a bit too late and are really just spending a bunch of venture capital to get a booth at RSA in the hopes that someone will notice them in the far corner of the exhibition hall.  Sad and maybe cynical, but it is true nonetheless.  So, needless to say, I typically avoid those small shops unless I see some good potential (I did setup a meeting with one of them, but I had to cancel because of work).

I did talk to eEye about some of their new offerings.  I have a USB key with all their info, so I will look it over and share what I think is cool.  What I do remember is that they are coming out with some appliances that seem to offer some nice features.  I give more details later.  What I did like about the eEye story is that most of their technology is their own stuff.  They don’t OEM much at all.  While I get the OEM model for companies trying to get into new markets without a lot of effort, it also drives me crazy when a company that is supposed to be a leader in the marketplace just starts OEMing everyone’s stuff.  If you are going to be taken seriously as a security player, you have to do some of your own research.  It kinda gives street cred in a way.  So kudos to eEye for maintaining that within their company.

I also talked with Enterasys, mostly because I used to hold some high-level certifications with those guys.  I worked with them way back in 2001, and they really had the edge as far as technology.  I believe they had the first partnership with Microsoft to get 802.1x going.  While not a true NAC play as far as malware and state-checking, it did limit access to resources at the port level.  That was revolutionary back in 2001, and if their management would have been worth a crap, they could be a major leader in the market right now.  But alas, twas not to be.

As mentioned in my previous post, I went to a blogger gathering with some marketing people over at Microsoft.  Shimmy, Martin, Dr. Anton, Mitchell, Hoff, and I all had a great time talking to the MSFT people (they let us talk ,so that is always a great time). 

I also got to have a nice little private chat with Howard Schmidt, Ed Zeitler, and Rob Ayoub about the Frost-Sullivan/(ISC)2 survey results (sorry that I can’t share them yet – it is embargoed for a couple of weeks).  It was a great conversation all around.  I had never met Mr. Schmidt, though I had attended some of his talks before.  It was nice to sit down and really get to know how he is in private conversation.  He was a really nice guy, and he was remarkably easy to talk with.  There was no hint of condescension (maybe there might have been if he had had thought I was just some journalist, but he found out I was a CISSP when I handed my card over).

Ed Zeilter is also a great guy.  Very open and had no airs about him.  Just liked to talk theory when discussing the results of the survey.  Rob Ayoub from Frost and Sullivan is someone I have met a few times (he is from San Antonio, so we cross paths at TRISC shows and other places).  He has always impressed me with his knowledge and good attitude.

On another note, I thought of something that I wanted to mention to the RSA Conference organizers for next years event.  I think it would be awesome to make a distinction between regular press and us blogger types on our badges.   I think bloggers are typically more respected than journalists because they usually have a day job that involves working in the industry, thus they tend to actually know the nuts and bolts.  Though I didn’t really experience any blatant shunning with my press badge, I did notice that people’s attitudes changed when they learned that I am a security engineer instead of some guy that just writes for a trade rag.  If they didn’t see my card before we started talking, the initial treatment I received was quite a bit different after I started asking in-depth technical questions.  The look in their eyes changes from a glazed "talking to another journalist" to a "this guy actually understands what he is asking".  We’ll see if the suggestion goes anywhere.

Vet