FBI Releases 2005 Computer Crime Survey
The FBI has published their 2005 computer
crime survey, with responses from over 2000 US-based public and private
organizations. The report reiterates the concerns of security professionals
regarding the frequency and complexity of attacks, as well as the slow adoption
of modern defense technologies.
The slow adoption of current technologies
is quite evident when survey results show less than 25% of organizations have
yet to implement some of the most important technologies into their security
program such as Intrusion Detection/Prevention (IDS/IPS). With companies as a
whole moving to Managed Security Service Providers to improve protection and
reduce the cost of implementation/ownership, experts expect this figure to
improve in the coming year.
Almost 9 out of 10 organizations reported
security incidents this past year. Of those reporting more than 64% incurred a
financial loss as a result of the computer crime and less then 10% actually
ported these incidents to law enforcement.
Internal attacks continue to rate almost
half of all intrusions, thus confirming that threats to unauthorized access,
intellectual theft, and Denial-of-Service (DoS) are not limited to
Internet-based attacks. Security event monitoring and auditing of internal
systems are still vital elements of an effective overall security program.
You can download the full report here:
2005
Computer Crime Survey
|