

|
|


|

|

|

|
 Victor Wheatman, Gartner Analyst |

|
|

|
Cybercrime a Threat to Information Security
Monday, 7 October 2002
Although the terrorist attacks of 2001 have raised consciousness concerning information security, it has been estimated that U.S. companies lose as much as $1 trillion each year to corporate espionage alone. The threats range from simple experimentation by employees exploring a server to cyber warfare and criminal conduct.
New technologies bring new security issues, said Victor Wheatman, a Gartner analyst speaking Monday at Gartner Symposium/ITxpo 2002 during his presentation, Information Security Strategies Scenario: Protecting Corporate Assets. Mr. Wheatman, a vice president and research director in Gartner's Research organization, specializes in key infrastructures.
"Today, he said, "the vast majority of incidents an enterprise is likely to experience involve curious Internet users, including employees, just clicking on servers to see what happens, or simple Web site defacement attacks. There is a cost to responding and cleaning up such attacks, but the impact to the enterprise’s bottom line is minimal. Most attacks in these categories are random, a nuisance, and not targeted to a specific business.
Targeted attacks provide a much higher risk to the bottom line and are generally launched by more sophisticated and motivated attackers. Most fall into the “hactivism” category, are politically motivated and elements in the underworld society of hackers are busy deveoping new way of disrupting enterprise systems. And the ubiquity of a basic collaborative tool, instant messaging, is creating worrisome holes, says Mr. Wheatman.
"We believe cybercrime represents the key growth industry during the next four years. Financially motivated attacks can be disastrous. Web services will lead to discontinuities in how new applications will be secured," he warned. "Insecure wireless LANs represent a serious point of potential failure for enterprise networks."
But intrusion detection systems are evolving toward more focus on preventing attacks and on “forensics, allowing enterprises to 'fight back' and prosecute," he said.
It's not just terrorists and hackers who are spurring new developments in information security. It is also a result of financial scandals.
"Recent corporate financial reporting scandals will influence the application of information security techniques to improve the trustworthiness of enterprise transactions and the audit trail." Mr. Wheatman said.
Rich Riggs Gartner Staff Writer
|

|

|
|
|
|