12/10/2009
11:43 AM
Keith Ferrell
Keith Ferrell
Commentary

Top 15 Threats: How The Crooks Are Coming At You

The latest Verizon Data Breach Report lists the top outside threats -- keyloggers, spyware, SQL injections, remote access and control -- and inside threats -- access and privilege abuse, usage and other policy violations -- that businesses have faced. The report is based on actual business's data breach experiences.



The latest Verizon Data Breach Report lists the top outside threats -- keyloggers, spyware, SQL injections, remote access and control -- and inside threats -- access and privilege abuse, usage and other policy violations -- that businesses have faced. The report is based on actual business's data breach experiences.According to Verizon, keyloggers and spyware were the top two attack types resulting in serious data breaches.

But there are plenty more attack vectors, as the new report shows.

The 2009 Data Breach Investigations Supplemental Report from Verizon is a detailed analysis and exploration of data company's earlier and even more detailed 2009 Data Breach Investigations Report.

Both are, I would say, must reads.

Drawing on information gathered by Verizon's computer forensics team, the top data breach attack result from:

1. Keyloggers/spyware

2. Remote access

3. SQL injection

4. Deliberate access/privilege abuse

5. Weak default credentials and passwords enabling unauthorized access

6. Usage and other policy violations (accidental or malicious)

7. Unauthorized access as a result of via weak or misconfigured access control lists

8. Packet sniffers

9. Stolen credentials providing malicious access

10. Pretexting: target employee manipulated into providing access

11. Bypassing authentication procedures

12. Physical theft

13. Brute-force attacks:password generators hammering at the door until an acceptable password is generated

14. RAM scrapers: data stolen from memory rather than storage

15. Phishing

The sheer range of attack strategies, types and technologies, and the fact that some of them are used in concert, is enough to give even the most vigilant (and, for that matter, appropriately paranoid) of us pause.

Problem is, as the Verizon reports show, we don't have time to pause at all.

Comment  | 
Email This  | 
Print  | 
RSS
More Insights
Copyright © 2021 UBM Electronics, A UBM company, All rights reserved. Privacy Policy | Terms of Service