Cloud
6/7/2017
01:10 PM
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
50%
50%

Cloud, Hackers, Trump Presidency, Drive Security Spend

Businesses reevaluate their security spending in response to the growth of cloud, fear of malicious hackers, and the Trump presidency, research finds.

Security leaders have cloud security, malicious hackers, and the Trump presidency at top of mind as they determine how to allocate security spend in 2017. Larger security budgets will go toward cloud, network, and data center security, and artificial intelligence in the coming year.

Scale Venture Partners polled 200 leaders in the US who oversee security buying decisions, success of security deployments, or overall business security. Its new report, "The State of Cybersecurity Priorities and Strategies 2017," includes top concerns and approaches for protecting organizations.

"Cloud security, which was nowhere to be seen as a priority maybe three years ago, has bubbled up as one of the top most widely invested areas in the last year," says Ariel Tseitlin, partner at Scale Venture Partners who oversees cloud and security investments.

Respondents say network security (68%), cloud security (60%), and data center/server security (60%) are the greatest areas of security tech investment this year. Tseitlin says it's "reassuring" to see cloud security grow as a priority as more businesses pursue cloud adoption.

"Today, we're squarely in this early majority phase of adoption of the public cloud," he explains. Not all cloud adopters are early adopters; many have become forward-leading cloud adopters, he notes.

However, the cloud is still new and growing, as are the means of securing it.

"Public cloud infrastructure is, by nature, much more dynamic and much more transient," says Tseitlin. "You need a different way of being able to handle it that you never had in the data center."

Malicious hackers are the top concern among security pros, even those who feel equipped to handle the risk. Nearly 60% think the threat level for data breaches will grow in the next year, more than any other threat. Nearly 75% allocate the most resources to data breach protection.

"Data theft tends to be the top worry" among companies fearing malicious hackers, says Tseitlin. Generally these threat actors are "malicious insiders or outsiders intent on stealing data and reselling for financial gain."

Customer databases, credit cards, and proprietary information tend to be the most coveted assets, he says.

Geopolitical worries are also top-of-mind. Nearly 40% of respondents plan to invest more in security tech post-election, and 44% plan to evolve security strategy and tech usage. Nearly half (48%) have changed their perspective on security threats in the current presidential administration, and 27% plan to focus on foreign nation-state attacks.

"It's one degree of difficulty to protect yourself from everyday criminal groups, but a higher level of sophistication to defend from state-sponsored attacks," Tseitlin says.

Leaders are looking to automation as they reevaluate their security operations and network operations centers. In the past two years, 75% have bought security automation tools. Nearly half (47%) plan to invest more in automation throughout the next year as a lack of skilled security analysts impedes their ability to manage the increase in security systems.

The role of artificial intelligence in security is also a hot topic for the year ahead, says Tseitlin, who speaks to the potential of AI. In the past two years, 47% of respondents have introduced AI-powered security solutions, and 75% of those using AI say it has helped address threats.

Researchers found there is opportunity for new security vendors to enter the market and current vendors to build new offerings. More than half (53%) of businesses are building in-house tools to fight threats like data breaches and malware because they don't see viable commercial alternatives.

It's worth noting that businesses tend to stick with the vendors they choose. Of the 62% of respondents who changed the allocation of security resources, only 17% reported changing vendors year-over-year.

Related Content:

Kelly Sheridan is Associate Editor at Dark Reading. She started her career in business tech journalism at Insurance & Technology and most recently reported for InformationWeek, where she covered Microsoft and business IT. Sheridan earned her BA at Villanova University. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Companies Blindly Believe They've Locked Down Users' Mobile Use
Dawn Kawamoto, Associate Editor, Dark Reading,  11/14/2017
Microsoft Word Vuln Went Unnoticed for 17 Years: Report
Kelly Sheridan, Associate Editor, Dark Reading,  11/14/2017
121 Pieces of Malware Flagged on NSA Employee's Home Computer
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/16/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Managing Cyber-Risk
An online breach could have a huge impact on your organization. Here are some strategies for measuring and managing that risk.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.