Hackers are focusing on new targets and looking beyond the operating system to gain access to computers, says Gary Middleton, Dimension Data GM of security solutions.
They are increasingly targeting Web browsers, e-mail clients and other applications, as well as client software, he adds.
"Vulnerabilities have been discovered recently in Apple Computer`s iTunes, RealNetworks` RealPlayer, Microsoft`s Internet Explorer, Mozilla Foundation`s Firefox, various Oracle applications, enterprise data-backup software from Computer Associates and Veritas, and Cisco`s IOS," he claims.
Middleton notes that globally, 90% of attacks are launched in the form of spyware, followed by viruses and worms, phishing, denial-of-service and Web scripting. About 14 000 phishing schemes are launched each month, with an average hit rate of 5%.
However, he points out that information security budgets within global organisations are starting to increase, rising from 11% of the total IT budget in 2003 and 2004, to 13% this year - according to a study conducted in September.
The trend is that more money from other departments is being leveraged to boost information security budgets, Middleton says. He adds that the survey found that funding tends to come from departments such as human resources, legal, finance and marketing.
Turning to technology within the global security landscape, Middleton points out that most organisations operate within a fragmented vendor market and functionality, with no integrated security view.
He adds that most organisations also lack a cohesive management capability in terms of information security, but consolidation with this market is gaining momentum, as many companies still rely on best-of-breed products and small businesses are driving demand for all-in-one solutions.
One answer to the question of dealing with information security is best practice assessments, he says.
Share
