Layered security is key in this environment, and host intrusion prevention systems, or HIPS, play a large role, says Brian O'Higgins, CTO for Third Brigade. Web 2.0 and Web applications are inviting attacks to move up the stack from the OS. Plus, protection of those apps is often rushed and lax. HIPS technology allows a virtual patch in a difficult environment, protecting a known vulnerability from unknown attacks. "That little sentence describes almost all malware today," says O'Higgins. The automatic attacks, widespread availability of vulnerability information and targeted attacks are making the gap between vulnerabilities and attacks smaller and smaller. HIPS, which used to be restricted to server endpoints, is now needed on host machines. And what will hackers do in retaliation? They will keep trying, but they are lazy, O'Higgins says, and will go after open doors rather than closed ones.