A look into my secret crystal ball:

The security industry by 2025

Disclaimer: A personal comment by Peter Kleissner. Views are my own. These
predictions come with absolutely no warranty. First published in Czech
Republic on 11/25/2015.

Foreword: I want to make predictions on how the IT security market will look
like in 10 years. If anyone disagrees with my predictions, my assessments or
finds flaws in my logic, I would like to invite anyone to counter me via mail to
info@kleissner.org (info@kleissner.org). My personal background is that I'm a
programmer and entrepreneur. I started the IT security company Kleissner &
Associates in 2013 which was acquired a few months ago. Previously I
worked at an international bank and at an anti-virus company. I am also a
frequent speaker at security conferences.

My predictions.

Economical
1. I believe in 10 years from now most security companies will not exis
The security market is pretty crowded, for each niche we have about ~30

Why I believe at the current point this is legitimate? Innovation.

Every year I see new companies rise with new products or new features i
There are new ways to detect & remediate threats, be it exploit mitigat

However, I believe the rate of innovation will start to significantly s

They will compete by their market strength and go-to market strategies.

Local companies (in the IT security service sector) always have their "

1.2 That said, only companies with comprehensive solutions will make it

1.3 You will need something unique (like Virus Tracker) to exist as com

2. I believe what's happening right now was the same in the late 90s. T

Technical

© 2015 Peter Kleissner

 3. Attacks in general get more targeted (that is happening already righ

Gone are the times of huge botnets like Conficker, ZeroAccess and ZeuS

4. In general everything (operating system, browser, hardware platform)

Writing a rootkit for example is today very difficult, there are all ki

5. The exploit market will grow. There will be more people making their

Political
6. A bank or stock exchange will be under fire. I wonder why it didn't
Ddos attacks are "dumb" but they can be very effective if you find the

7. There will be attacks on entire countries. The technical capability

By attacks on entire countries I mean: Attacking national banks (see pr
Most people think that future attacks mean they will magically hack the

8. We will read more movie-alike stories of hackers who work for govern

9. We will see a rise in propaganda through digital channels, again sta

I personally observe many comments in the comment section of news sites
Other countries will copy this digital psychological warfare as it is e

10. Big countries will realize that defense in IT security DOES NOT wor

11. Even though many people believe it, terrorist groups like IS or Al
However, they will continue to abuse social media for their propaganda

12. The United Nations will address IT security and there will be a new

13. While there will not be laws to force companies to implement "activ