I think we still have a lot of work to do in the Network Security space. With <10% market share we need to stayed focused on Network Security. We will continue, however, to do what we do well - change the definition of Network Security
I'm actually seeing the threat from web app vulnerabilities declining. The bad guys are putting much more effort into taking of end points as the starting point for getting into the data center
I'd start with having CIOs not take "no can do" from an answer from CSOs. The days of security not letting the business do its business are gone. There are many great technologies that let business operate as it wishes while staying secure
I wish I knew what would be the biggest threat of 2014. The important thing is to be on the watch looking for it and have a security architecture to quickly deal with it