So ensuring the integrity of the data and integrity and validity of the connection is a very important element in any company's strategy that is moving towards a Web service paradigm.

Well Web services are nothing more than a way for users to interact with applications.

If you accept that security is a process, and if you can eliminate the human interaction or intervention in that process by automating more, that is a good thing.

One of the things that has been truly incredible to observe though, is the amount of venture investment that has gone into early stage security technology.

While there have been terrific advances in the state of technology around heuristics, behavior blocking, and things like that, technology is only a part of the approach to solving the problem with the more important aspect involving putting the right process in place.

First, I do not think there is any silver bullet to solving the technology side of the security equation.

Second issue is the rapidly accelerating increase in the number of vulnerabilities that get discovered every day. And, equally importantly, is the shortening of time between the discovery of the vulnerability and the release of an exploit.