A changing landscape

A changing landscape
Rohyt Belani, 2005-09-07

In 2004, I came across an empirical study published by the CERT/CC that indicated a diminishing correlation between the number of vendor-issued vulnerabilities and the number of reported security incidents. In the years prior to 2002, the number of reported security breaches had always been proportional to the number of vendor-published vulnerabilities. That corollary made sense, since attacks and worms followed vulnerabilities. However, in 2003 and beyond this was no longer the case. The number of incidents rose dramatically as compared to the number of published vulnerabilities.

Expand all | Post comment

A changing landscape 2005-09-07
Anonymous (1 replies)

Re: A changing landscape 2005-09-07
Anonymous (1 replies)

Re: Re: A changing landscape 2005-09-22
Anonymous

A changing landscape 2005-09-07
Anonymous

A changing landscape 2005-09-08
Anonymous

A changing landscape 2005-09-09
Griggs

A changing landscape 2005-09-09
Augusto P Barros

changing our point of view 2005-09-12
Alexey Vesnin (1 replies)

Re: changing our point of view 2005-09-15
Anonymous (2 replies)

Re: Re: changing our point of view 2005-09-20
Alexey Vesnin

Agreed. But there's one Russia-specific problem. People are too bored to even change their password at least once a month, and if you let 'em make their passwords - don't be amazed discovering passwords like "123", "aaa", "12345" and similar. It's useless to talk to them, to explain how bad it is. "It's just convinient for us - and we want the increased security". Often you'll find a password written down and sticked to monitor on a stick-paper... What kind of security AT ALL can be in such a case? That's why I found SecurID very useful for it - I can make 16-chars or longer passwords that are changed weekly without fighting that windmills... It's expensive - agreed twice, but in such a case there's no other way. Main security hole in ANY system is a human factor.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/352/32401#32401

Re: Re: changing our point of view 2005-09-29
eMZe