ANTenna Blog -- Security
Top 15 Threats: How The Crooks Are Coming At You
Posted by Keith Ferrell Thursday, Dec 10, 2009, 11:43 AM ET
The latest Verizon Data Breach Report lists the top outside threats -- keyloggers, spyware, SQL injections, remote access and control -- and inside threats -- access and privilege abuse, usage and other policy violations -- that businesses have faced. The report is based on actual business's data breach experiences.
According to Verizon, keyloggers and spyware were the top two attack types resulting in serious data breaches.
But there are plenty more attack vectors, as the new report shows.
The 2009 Data Breach Investigations Supplemental Report from Verizon is a detailed analysis and exploration of data company's earlier and even more detailed 2009 Data Breach Investigations Report.
Both are, I would say, must reads.
Drawing on information gathered by Verizon's computer forensics team, the top data breach attack result from:
1. Keyloggers/spyware
2. Remote access
3. SQL injection
4. Deliberate access/privilege abuse
5. Weak default credentials and passwords enabling unauthorized access
6. Usage and other policy violations (accidental or malicious)
7. Unauthorized access as a result of via weak or misconfigured access control lists
8. Packet sniffers
9. Stolen credentials providing malicious access
10. Pretexting: target employee manipulated into providing access
11. Bypassing authentication procedures
12. Physical theft
13. Brute-force attacks:password generators hammering at the door until an acceptable password is generated
14. RAM scrapers: data stolen from memory rather than storage
15. Phishing
The sheer range of attack strategies, types and technologies, and the fact that some of them are used in concert, is enough to give even the most vigilant (and, for that matter, appropriately paranoid) of us pause.
Problem is, as the Verizon reports show, we don't have time to pause at all.
Security
Business & E-Business
| IT
| Internet/Web
This is a public forum. CMP Media and its affiliates are not responsible for and do not control what is posted herein. CMP Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.
Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of CMP Media LLC and may be edited and republished in print or electronic format as outlined in CMP Media's Terms of Service.
Important Note: This comment area is NOT intended for commercial messages or solicitations of business.
- Phone Systems Guide - What kind of phone system is right for your business
- Web Design Guide - What to look for in a Web designer
- Merchant Services Guide - Credit card processing and more
- Online Marketing Guide - Leverage the Net to market your business
- Alternative Financing Guide - How to find the cash your business needs
- View all guides
Explore ANTenna Blog
Most Recent Posts
- SMB Confidence Up, Spending And Hiring Still Flat
- Meraki Enhances Wireless Cloud Service Security
- New FileMaker Boosts Analysis, Collaboration Features
- Do As Security Pros Say, Not As They Do
- Polycom Adds Another Partner
ANTenna Blog Topics
- Apple
- Backup
- bMighty
- Business & E-Business
- Business Continuity
- Cloud Computing
- Company Size: 1,100-1,500
- Company Size: 250-999
- Company Size: 50-249
- Company Size: 1-49
- Disaster Recovery
- Economics
- Education
- Entrepreneurs
- Finance/Accounting
- Finance/Banking/Insurance
- Government
- Green Business
- Hardware & Software
- Healthcare
- Hospitality
- How-To
- HR
- Imaging How-To
- International
- Internet/Web
- iPhone
- IT
- Linux
- Management
- Manufacturing/Mining
- Messaging
- Mobile
- Networking & Communications
- Non-Profit
- Open Source
- Operations
- Piracy
- Printers/Printing
- Professional/Creative Services
- Retail
- Unified Communications
- Sales/Marketing
- Start-Ups
- Security
- Server How-To
- Services
- Social Networking
- Software-as-a-Service
- Storage
- Strategy/Analysis/Biz Dev
- Technology/Telecom
- The rANT
- Transportation
- Travel
- Windows
- Web 2.0
- Women in Business
ANTenna Bloggers
ANTenna Blog Roll
- ANTenna Archive
- Ars Technica
- Business Know-How
- ChannelWeb Hot Topics
- ChannelWeb The Chart
- Datamation
- Duct Tape Marketing
- The Entrepreneurial Mind
- Freakonomics
- GigaOmNet
- Guy Kawasaki
- Inc.com
- IT Organization Management
- IT Manager's Journal
- IT Toolbox
- LifeHacker
- Mashable
- MonkeyBrains
- Network Computing Blog
- Scott Berkun
- Search Engine Land
- Search Engine Watch
- SmallBizResource
- SmallBizTechnology.com
- SmallBusinessHub
- Small Business Trends
- TechCrunch
- Technologizer
- Tech Republic
- The Secret Diary of Steve Jobs
- USA Today Small Biz Connection
- Valleywag
- Walt Mossberg Feed - All Things Digital
- Web Worker Daily
- WorkHappy.net
- WSJ's Business Technology
InformationWeek SMB email newsletter!
Browse by Category
IW SMB Tech
Term Of Day:
Boost your tech
vocabulary!
InformationWeek SMB's
TechEncyclopedia
defines more than
20,000 IT terms.
FREE Technology Services Locator!
Search our database of 200,000 solution- provider locations by business activity, technology, vertical market, and customer size. Find a technology partner NOW.
go



