Reducing the cost and complexity of web vulnerability management
[[{"fid":"37997","view_mode":"default","fields":{"field_file_image_alt_text[und][0][value]":"","field_file_image_title_text[und][0][value]":""},"type":"media","attributes":{"height":425,"width":700,"style":"display: block; margin-left: auto; margin-right: auto;","class":"media-element file-default"}}]] In June 2010, a group of hackers obtained the email addresses of more than 120,000 Apple iPad customers1 – including top officials in government, finance, media, technology, and military – by exploiting a security hole on an AT&T website. Unfortunately, events like this are all too common. The volume of Web-based attacks increased by 93 percent in 2010, exposing an average of 230,000 identities in each data security breach caused by hacking3 throughout the year. In a recent study conducted by the Ponemon Institute, 90 percent of respondents indicated that they have had two or more breaches in the past 12 months, and nearly two-thirds responded that they have had multiple breaches during the same period of time. These breaches can be incredibly expensive. Studies show that the average cost per incident of a data breach in the United States is $7.2 million, with one of the largest breaches costing $35.3 million5 to resolve. Security lapses involving personal information can also erode consumer trust; more than half of Internet users avoid buying online6 because they’re afraid that their financial information might be stolen. With stakes so high, organizations need to focus their security efforts to prevent these and other breaches. Check it out here.