For example, Elemental Security* reports on the state of systems within the company and allows administrators to express and enforce policies. Vulnerability scanning tools from leading companies such as Qualys offer visibility and tracking of exposed systems. Still other companies focus on protecting and monitoring particular types of data, whether structured and stored within databases or unstructured and residing on file servers. A final class of companies protects content transmitted by specific applications, such as e-mail and instant messaging.

Many of the most advanced network and host-based products focus on servicing this new need around information security. Companies such as Vontu and PortAuthority, for instance, examine outbound content to prohibit transmission of proprietary information. Moreover, the sharp contrast distinguishing network and host security will continue blurring. Security, networking, systems management and even storage will ultimately evolve to address the demands of information security.

This category remains ripe for innovation. New generations of exciting startups pushing the boundaries of information security are expected.

Conclusions about Information Security
Security is an ever-moving target and the increasing severity of attacks, combined with a greater emphasis on ensuring protection, are definitive catalysts for action. Every CIO must remain current on the arsenal of security products available. 

Existing perimeter products from established vendors address necessary and fundamental functions, but are insufficient for complete coverage. These solutions guard only the basic network transportation system. Securing critical infrastructure requires products that protect individual servers and desktops from targeted attacks. Looking ahead, products that protect and monitor applications and data promise to secure the most vital assets within our computing systems.

Best practices demand CIOs develop a security strategy that combines network, host and information protection. As venture capitalists, we are continually watching for exciting new companies that address these needs.

_{^{* a Mayfield Fund investment}}

Robin Vasan and Tom Fountain are venture capital investors focused on security and infrastructure software with the early-stage venture capital firm Mayfield Fund. Robin can be reached at rvasan@mayfield.com. Tom can be reached at tfountain@mayfield.com.