Companies are wasting money on security processes — such as applying patches and using antivirus software — which just don"t work, according to Cisco"s chief security officer John Stewart.
Speaking at the AusCERT 2008 conference in the Gold Coast yesterday, Stewart said the malware industry is moving faster than the security industry, making it impossible for users to remain secure.
"If patching and antivirus is where I spend my money, and I"m still getting infected and I still have to clean up computers and I still need to reload them and still have to recover the user"s data and I still have to reinstall it, the entire cost equation of that is a waste. ... It"s completely wasted money," Stewart told delegates.
He said infections have become so common that most companies have learned to live with them.