Information Security Incidents Survey in Russia

2. Information Security Incidents Survey in Russia

3. Survey among the largest companies - Top 100 Number of company’s hosts Source: Posi,ve Research Center, Survey among CISOs of Top 100 companies, May 2014

4. Industries in the Survey

5. Did you have information security incidents in 2013? All the companies had such incidents. 58% of all incidents aﬀected the availability of internal infrastructure or services.

6. Incident types

7. Which threats are the most dangerous?

8. In fact … • 2 vulners – to hack a corporate network’s perimeter • 2 steps (2013) vs 3 steps (2012) • 82% successful aQack – low aQacker qualiﬁca,on • 100% -‐ control cri,cal resources from internal network (83% -‐ 2012)

9. Critical vulnerabilities ﬁxing time

10. In fact … • 57% system -‐ cri,cal vulnerabili,es (unpatched soWware) • 57% -‐ 2013 vs 45% -‐ 2012 • 32 month -‐ average age of uninstall updates • Absolute Champion – nine-‐year-‐old vulnerability (CVE-‐2004-‐0790)

11. First-priority problems

Information Security Incidents Survey in Russia

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (17)

Destaque

Destaque (19)

Semelhante a Information Security Incidents Survey in Russia

Semelhante a Information Security Incidents Survey in Russia (20)

Mais de Positive Hack Days

Mais de Positive Hack Days (20)

Último

Último (20)

Information Security Incidents Survey in Russia