"In deciding when to adopt a new security technology, timing is crucial; invest too soon and you risk the pain and expense of an immature technology; invest too slowly and you risk being left behind and leaving your organization vulnerable."

Mogull also said that functional convergence in security products is occurring.

For example, host firewalls, antivirus, antispam, and basic host intrusion prevention are combining into single, desktop agents.

In the future, this will make security less complex, he said.