UK.biz leaves door open to hackers
One in three of UK corporates has suffered hacking attempts on their websites over the last year, according to a survey out today. The report revealed hackers are becoming more successful at punching holes through flimsy corporate defences. Four per cent (or 40) of the 1,000 companies surveyed admitted their systems had been penetrated over the last 12 months, the Department of Trade and Industry's 2004 Information Security Breaches Survey reveals. This penetration figure is four times higher than that recorded by the last DTI Information Security Breaches Survey, two years ago. Three quarters of businesses that reported system penetration in the 2004 study rated it as their worst security incident of the year (worse than, for example, virus infections), with more than a third describing the impact as 'very serious'. The time spent on investigating attacks and carrying our remediation work was far more costly to companies than any service disruption caused by Internet attack. Despite increasing network security incidents, businesses remain largely satisfied about the effectiveness of defences, with 72 per cent expressing confidence in their ability to detect or prevent security breaches. But this confidence may be misplaced because many organisations do not test their network security. These are among preliminary findings from the 2004 Department of Trade and Industry's Information Security Breaches Survey, conducted by a consortium led by PricewaterhouseCoopers. The full results of the survey will be launched at InfoSecurity Europe in London, 27-29 April. The telephone survey of some 1,000 companies found that firewalls were the main line of defence against hackers for most companies. Three quarters of corporates used firewalls but for half the companies surveyed this was their only defence against crackers. Larger companies were more likely to use intrusion detection (electronic burglar alarm) software as a supplementary security measure. Around half of all businesses have their websites hosted externally, relying solely on their ISP for security. Many companies had no idea what defences their ISPs had against attack. Andrew Beard, the PricewaterhouseCoopers services director involved in the survey, said: "The survey findings point to a real concern that businesses without the right monitoring and intrusion prevention processes in place may have a false level of comfort. Scanning and hacking activity may not be detected until it is too late to react."
Reproduced from an article published by The Register
© The Register
The original article can be viewed here:
http://www.theregister.co.uk/content/55/36435.html
Permalink Bookmark Digg this story
