Oracle is obsessed with security. It's an absolute requirement for all our products. The real security issue is when customers take older products that were not built for the Internet, and kind of rack them and put them on the Internet.
You will not even have enough time to go online and download all the patches to your computer before it is infected.
Effective cyber-security should be considered an investment.
Device makers, especially consumer-focused ones, have been the Achilles' heel of IoT security. These vendors have often viewed proper security implementations as extra cost, complexity, and time-to-market burdens with an unclear payoff.
Second issue is the rapidly accelerating increase in the number of vulnerabilities that get discovered every day. And, equally importantly, is the shortening of time between the discovery of the vulnerability and the release of an exploit.
I think malware is a significant threat because the mitigation, like antivirus software, hasn't evolved to a point to really mitigate the risk to a reasonable degree.
One bug in an SMTP server can open up the whole machine for intrusion.
New security loopholes are constantly popping up because of wireless networking. The cat-and-mouse game between hackers and system administrators is still in full swing.
Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.
You can't go to Windows Update and get a patch for stupidity.
Over the near term there is clearly the opportunity to work with Microsoft to do to a better job of creating a more secure Windows experience for users around the world.
First, our focus on security is on the infrastructure itself. So it is all about how you protect the network, the device, and the application that is riding on the server.
Yet we still see continuous reports of bugs.
We ship a new version of Google Play Services every six weeks. Typically, 90 percent of users are on the new version of that.
