Access and Feeds

Cyber Hacking: Ignoring Security Issues is an Invitation for Trouble

By Dick Weisinger

Application security is still a major problem for most industries. WhiteHat Security found that more than half of the apps across 11 different industries had at least one major security problem. The industries include utilities, public administration, and professional services.

The top vulnerabilities that were found include information leakage, insufficient session expiration, cross-site scripting, content spoofing, and insufficient transport layer protection.

Setu Kulkarni, vice president at WhiteHat/NTT, said that “once you find the vulnerability, fixing that vulnerability is not a trivial process because you have to find the right development team, and in many cases, that development team is long gone. Some of the applications that we use every day are the ones that have been in production for the longest time.”

It often takes many weeks or months to fix a vulnerability once it has been identified. Given the number of problems and the long turn-around time needed to fix any one problem mean that cyber hacks are very likely to continue in a big way well into the foreseeable future. These number and severity of discovered vulnerabilities reinforce the need for industries of all types to invest in application security.

Kevin Morley, manager at the American Water Works, said that “I think there’s a potential rabbit hole that people go down, expecting this to never happen. At some point, your system’s going to be challenged.”

Digg This
Reddit This
Stumble Now!
Buzz This
Vote on DZone
Share on Facebook
Bookmark this on Delicious
Kick It on
Shout it
Share on LinkedIn
Bookmark this on Technorati
Post on Twitter
Google Buzz (aka. Google Reader)

Leave a Reply

Your email address will not be published.