Gary McGraw notes that software security is growing faster than IT security as a whole, arguing that it's because firewalls, fairy dust and forensics don't work very well.