Survey: Most plan to maintain or increase web security spending
Monday, March 23, 2009
A new survey released by the Security Spending Benchmarks Project found that two-thirds of companies expect their spending on web application security to either stay flat or increase this year.
Conducted by the Open Web Application Security Project (OWASP), the benchmarking report seeks to quantify how resources should be allocated towards network security efforts.
"This project is motivated by the fact that there are few, if any, industry standard benchmarks for executive management to consider when deciding what is a reasonable amount of resources to spend on Web application security in or out of the software development processes," the introduction to the report says.
The survey of 51 companies found that organizations that have suffered a public data breach spend more on security in the development process than those that have not and 38 percent of companies have a third party conduct a security review of outsourced code.
An independent third party security review is conducted at 61 percent of companies before deploying a web application, while 17 percent do not use a thi8rd party review.
A little less than 50 percent of the surveyed organizations have web application firewalls deployed for at least some of their applications.
Related News:
FBI: Law firms and PR agencies high on hacker target lists - 11.18.2009
Using complex email scams, cyber criminals are increasingly targeting sensitive information held by law firms and public relations companies, according to an FBI advisory released earlier this month.
Phishing email takes numerous forms - 11.17.2009
The practice of impersonating authoritative websites and sources in order to convince victims to divulge personal information - known as phishing - has come a long way from the Nigerian "419" scams that popularized the technique in the public mind. Modern phishing is becoming increasingly dangerous in part because attacks can come from a variety of sources.
Email filtering technology working overtime, but spam won't go quietly - 11.16.2009
While modern email filtering systems can block 95 to 99 percent of spam messages, according to Tech Target, mountains of unsolicited email are still delivered every day, accounting for the vast majority of all emails sent.
Phishing scam targets investors, spoofs finance agency - 10.9.2009
The Financial Industry Regulatory Agency (FINRA), an independent regulator of brokerages, is warning investors that they may be targeted by a phishing scam through emails claiming to come from the agency.
Phishing scammers leak Windows Live Hotmail passwords to web - 10.6.2009
Hackers posted thousands of passwords from Windows Live Hotmail email accounts to a website over the weekend, in what Microsoft said was the result of a phishing campaign targeting the free webmail service.
|
