RSA's Art Coviello spells out security challenges ahead

Are security concerns hindering e-commerce?

Last summer Gartner reported that, in 2006, close to 50% of online consumers had changed their behavior because of security incidents and that almost 70% are more careful entering sensitive data. RSA has also seen some evidence of both consumers and businesses drawing back from e-commerce as a result of security concerns. I think that is inevitable to an extent. What I find encouraging, however, is the feedback from organizations that report accelerated growth in e-commerce - and in the adoption of online services - as a result of their measures to enhance security. There is a clear correlation between showing your customers that you take their security seriously, and that sense of responsibility being repaid with greater usage, trust and confidence.

Social networks are a boom phenomenon. Are you concerned about the security and identity theft risks they pose?

There are certainly risks that members of these networks need to be aware of. People post a lot of personal data on social networking sites that can be exploited - including date and place of birth, where they live, and more. Think about what you need to open a bank account - your date of birth, address and something like a social security number: some people readily post two out of those three on their social networking home pages. I would not put my birthday on a Web site - and certainly not when all that's protecting me is a static password!

What's interesting is that RSA did a man-on-the-street survey in 2005, under the guise of a tourism study, in which we asked people face-to-face for exactly this type of personal data. It was surprising, and concerning, that they gave it up to us back then - but now today they're posting it on the Web of their own accord! And the irony of it all is that this is the type of information that businesses are being compelled to protect with robust security on behalf of their customers - or face the consequences.