As always RSA was a good use of our time. The meeting was definitely slower than last year and there wasn't a lot of earthshaking news, but it is still unquestionably THE security meeting and a great place for use to meet with a lot of interesting companies and people efficiently. Security continues to be best viewed as a war between the forces of good and evil, and in the last year you would have to say that evil gained ground as evidenced by things like the Conficker virus. In the end we think that Conficker will be great wakeup call because it shows so clearly that if we thought we were well-protected because disruptions like SQLSlammer hadn't returned it was very bad thinking. There is unquestionably progress being made on much more sophisticated security solutions, with many forms of sensor input and often requiring analysis and some part of the solution in the Cloud. All the big desktop security companies seem to have realized that the desktop systems that get infected in the past are likely to get infected in the future. The value of this epiphany is that they act as a great Petri dish for the early detection of new malware. The cleverest application of this understanding is the realization that pirated security software in China running on pirated versions of Windows are a really good deal as long as they report what they see back to the mother ship. Machiavelli lives!
