ANTenna Blog -- Security

Top 15 Threats: How The Crooks Are Coming At You

Posted by Keith Ferrell Thursday, Dec 10, 2009, 11:43 AM ET

The latest Verizon Data Breach Report lists the top outside threats -- keyloggers, spyware, SQL injections, remote access and control -- and inside threats -- access and privilege abuse, usage and other policy violations -- that businesses have faced. The report is based on actual business's data breach experiences.

According to Verizon, keyloggers and spyware were the top two attack types resulting in serious data breaches.

But there are plenty more attack vectors, as the new report shows.

The 2009 Data Breach Investigations Supplemental Report from Verizon is a detailed analysis and exploration of data company's earlier and even more detailed 2009 Data Breach Investigations Report.

Both are, I would say, must reads.

Drawing on information gathered by Verizon's computer forensics team, the top data breach attack result from:

1. Keyloggers/spyware

2. Remote access

3. SQL injection

4. Deliberate access/privilege abuse

5. Weak default credentials and passwords enabling unauthorized access

6. Usage and other policy violations (accidental or malicious)

7. Unauthorized access as a result of via weak or misconfigured access control lists

8. Packet sniffers

9. Stolen credentials providing malicious access

10. Pretexting: target employee manipulated into providing access

11. Bypassing authentication procedures

12. Physical theft

13. Brute-force attacks:password generators hammering at the door until an acceptable password is generated

14. RAM scrapers: data stolen from memory rather than storage

15. Phishing

The sheer range of attack strategies, types and technologies, and the fact that some of them are used in concert, is enough to give even the most vigilant (and, for that matter, appropriately paranoid) of us pause.

Problem is, as the Verizon reports show, we don't have time to pause at all.


Security
Business & E-Business | IT | Internet/Web




This is a public forum. CMP Media and its affiliates are not responsible for and do not control what is posted herein. CMP Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of CMP Media LLC and may be edited and republished in print or electronic format as outlined in CMP Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.




Explore ANTenna Blog
Most Recent Posts
ANTenna Blog Topics
     
     
ANTenna Bloggers
ANTenna Blog Roll


 


Browse by Category

IW SMB Tech
Term Of Day:

Boost your tech
vocabulary!
InformationWeek SMB's
TechEncyclopedia
defines more than
20,000 IT terms.



FREE Technology Services Locator!

Search our database of 200,000 solution- provider locations by business activity, technology, vertical market, and customer size. Find a technology partner NOW.

go