Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
A changing landscape
Rohyt Belani, 2005-09-07

In 2004, I came across an empirical study published by the CERT/CC that indicated a diminishing correlation between the number of vendor-issued vulnerabilities and the number of reported security incidents. In the years prior to 2002, the number of reported security breaches had always been proportional to the number of vendor-published vulnerabilities. That corollary made sense, since attacks and worms followed vulnerabilities. However, in 2003 and beyond this was no longer the case. The number of incidents rose dramatically as compared to the number of published vulnerabilities.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Re: A changing landscape 2005-09-07
Anonymous
This isn't just about phishing - note the repeated mention of the keystroke loggers. The user could be at the correct site (in fact it is preferred if they are) and as they type in their credentials, the logger harvests and sends them to the attacker. Bookmarking wont do anything in this case....

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus