Sidebar 2: Security Basics

IDC places infrastructure software security in the following categories:

• Identity and access management focuses on ensuring users are who they say they are and have permission to access the data they are seeking. Examples: Single sign-on technologies, user provisioning, authentication technologies, directory services.
• Secure content and threat management include technologies that prevent malicious network intruders. Examples: Network security, messaging security, endpoint security, Web security.
• Security and vulnerability management includes solutions that help organizations identify weaknesses and assess risks. Examples: Vulnerability assessment and remediation, patch management, logging, security technology management.
• Other security software covers emerging and underlying technologies that don't fit into the above categories. Examples: Encryption tools and algorithms, wireless security, Web services security, secure operating system