At the recent Interop conference, Joshua Corman from IBM laid out the truth on the table about the scare jobs you're probably experiencing from today's security companies. The reality is quite a bit more scary than what you probably perceive, namely that "the goal of the security vendor is not to secure, it's to make money."

But we all really knew that, didn't we?

Joshua goes on to talk about the specific seven secrets. I'll list them here, but you should read the full article to learn more about why they exist. From InfoWorld:

1. Antivirus certifications are misleading
2. There is no perimeter
3. Risk analysis threatens vendors
4. There is more to risk than just weak software
5. Compliance threatens security
6. Vendor blind spots allowed the Storm worm outbreak to happen
7. Security has grown well past do-it-yourself

Read the full article at:
http://www.infoworld.com/article/08/05/01/7-dirty-secrets-of-the-security-industry_1.html?source=NLC-SEC&cgd=2008-05-05