Sajha.com Archives
Status of PKI

   FYI. Below is a piece of news taken from 07-Jan-02 Puru Subedi


Username Post
Puru Subedi Posted on 07-Jan-02 02:30 PM

FYI. Below is a piece of news taken from toady's SANS NewsBites Vol. 4 Bonus Issue.

I thought PKI was widely adapted by US Government. There were few good initiatives to incorporate PKI at DoD about a year so ago......

Did not know PKI would really die this fast.

-Puru Subedi


=====
--7. Eugene Schultz
(i). 2002 will be the year in which the public key infrastructure
movement will functionally die. Plagued by problems such as
non-interoperability of products and failure to consider business
drivers, the PKI movement was (unfortunately) doomed from the start.

(ii). 2002 will be marked by major advances in intrusion detection.
The intrusion detection community will continue to move away from
the simple signature-based systems that are currently so prevalent.
Rule- and profile-based intrusion detection will start to become
more dominant. There will also be increased government funding for
intrusion detection research.

(iii). There will be continued, massive change in the security
consulting industry. Many start-up companies will continue to go out
of business, leaving the major consultancies in control of the services
(e.g., managed services) that so many start-up companies originated.
The result for clients will be increased cost, but also increased
stability and reliability.

Eugene Schultz is a Principal Engineer with Lawrence Berkeley
National Laboratory and also teaches computer science courses at the
UC Berkeley. He is the author of important books on Windows Security
and Incident Handling and he founded the US Department of Energy's
Computer Incident Advisory Capability (CIAC)