Organizations Are Not Adopting Measures to Limit Security Intrusion Impacts

摘要

The threat of increasingly more serious security intrusions to IT systems has failed to motivate many organizations to take the steps necessary to protect their software, hardware, and data. Just considering one category of threat, malicious code (malware) was responsible for 60% of all IT security incidents reported to the CERT Coordination Center in 2004. Adding to the significance of the problem, the rate of incidents is increasing. (Note that a CERT incident may involve thousands of sites, and many incidents never get reported.) In the period of 2002 to 2003, the number of incidents reported to CERT rose by 40%. In contrast, the rise in the incident rate from 2001 to 2002 was 36%.