Fergie's Tech Blog

Defending Against Internet Security Risks Becoming More Difficult

William Jackson writes on GCN.com:

Online threats are becoming increasingly targeted and personal, creating new challenges for information technology security personnel, according to the latest list of top 20 Internet security risks released today by the SANS Institute.

Two major trends in this year’s list are social engineering — duping executives, IT staff and others with privileged access so that high-value computers can be compromised — and the targeting of custom-built applications, often Web applications, that can expose data on the server side and infect additional computers on the client side. Half of the total vulnerabilities reported in 2007 have been in Web applications, said Robert Dhamankar, senior manager of security research at TippingPoint.

The complete, updated seventh annual list is available at www.sans.org/top20.

posted by Fergie @ 11/27/2007 01:37:00 PM