Mark Litchfield wrote:
I have heard the comment "It's a huge conflict of interest" for one company
to provide both an operating platform and a security platform" made by John
Thompson (CEO Symantec) many times from many different people. See article
below.
http://www2.csoonline.com/blog_view.html?CID=32554
In my personal opinion, regardless of the vendor, if they create an OS, why
would it be a conflict of interest for them to want to protect their own OS
from attack. One would assume that this is a responsible approach by the
vendor, but one could also argue that their OS should be coded securely in
the first place. If this were to happen then the need for the Symantec's,
McAfee's of the world would some what diminsh.
Anyway I am just curious as to what other people think.
From a technical standpoint, of course everyone at an OS vendor, even down
to the janitors, wants their OS secure as possible.
But the problem isn't the desire or the knowledge of the technology.
Anytime Thompson, or any software publisher CEO uses a vague term like
"security platform," you know they have a marketing hat on, and their comments
are going to be largely devoid of supporting detail. That is not an indication
these people are ignorant.
Second, I think at least part of what he left out is that developing, deploying,
and maintaining software that performs malware identification and mitigation is
a multi-faceted task. In fact, all software publishing is complicated. Success
requires some marketing, a lot of research, some high-traffic and spiked
distribution server access patterns, a clean parking lot, janitors, and did I
mention some actual software development too?
So yes, there are lots of ways to get distracted. Budget politics, marketing
choices, shareholder dividends, talent shortage, growth, acquisitions (did
someone say Veritas?), currency fluctuation.
Claiming "conflict of interest" is a diversion. The truth, I think, is that
competition keeps vendors honest, on their toes, and delivering increased value
at decreased price. Symantec would improve if they faced more competition, and
MicroSoft would improve if they faced more competition. It's how a free market
works.
