New networking services, wireless devices and the latest products regularly turn network security upside down. It's no wonder CIOs can't keep up. What's amazing is that no one else can either. And every year things get worse. I'm here to tell you it's not about the technology.
Network security is an arms race, where the attackers have all the advantages.
Second, the immense complexity of modern networks makes them impossible to properly secure. And third, skilled attackers can encapsulate their attacks in automatic programs, allowing people with no skill to use them. The way forward is not more products but better processes. We have to stop looking for the magic preventive technology that will avoid the threats, and embrace processes that will let us manage the risks. On the Internet this translates to constant monitoring of your network.