News
4/9/2014
12:30 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Study Reveals 40% of Data Needs Protection; Less than Half of that Gets It

"There is too much information, it's too diverse and too fast."

EMC has released the findings of its 7th annual measurement and analysis of the "digital universe,' defined as all of the digital data created, replicated and consumed each year worldwide.

This year’s findings reveal:

  • 4.4 trillion gigabytes of data created in 2013, less than half the data that needed protection received protection
  • The percentage of data in the digital universe that requires protection is growing exponentially; in 2013, 40% of data required some level of security, compared to 35% in 2012
  • In 2013, less than 20% of the data in the digital universe was either stored or processed by the cloud in some way. By 2020, that percentage will double to 40%.

The digital universe is continually expanding due to phenomena such as the online proliferation of emerging markets and the explosion of the Internet of Things – both of which bring new levels of convenience and efficiency; however, they will also bring forth new ethical questions and inevitable security concerns.

This year’s findings reiterate the need and importance of proper data security. The digital universe is growing exponentially – there is too much information, it’s too diverse and too fast. While this provides great potential for businesses it also comes with great challenges as businesses look to cope with this data deluge to protect themselves and their customers. 

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3580
Published: 2014-12-18
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

CVE-2014-4801
Published: 2014-12-18
Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x through 2.0.1.1, 3.x before 3.0.1.6 iFix 4, 4.x before 4.0.7 iFix 2, and 5.x before 5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVE-2014-6076
Published: 2014-12-18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to conduct clickjacking attacks via a crafted web site.

CVE-2014-6077
Published: 2014-12-18
Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

CVE-2014-6078
Published: 2014-12-18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.