{"id":5952,"date":"2015-12-31T07:00:02","date_gmt":"2015-12-31T15:00:02","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=5952"},"modified":"2015-11-15T18:28:38","modified_gmt":"2015-11-16T02:28:38","slug":"security-it-blindsided-by-application-defects-the-cause-of-most-security-incidents","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-it-blindsided-by-application-defects-the-cause-of-most-security-incidents\/","title":{"rendered":"Security: IT Blindsided by Application Defects &#8212; the Cause of Most Security Incidents"},"content":{"rendered":"<p>Despite sophisticated security defenses that many IT departments build, data breaches at companies are much more likely to originate at the application level.<\/p>\n<p><a href=\"http:\/\/www.stonybrook.edu\/commcms\/csbuilding\/zinghini.html\" target=\"_blank\">Frank Zinghini<\/a>, CEO of Applied Visions, <a href=\"http:\/\/www.reuters.com\/article\/2015\/08\/31\/idUSnMKWlVn5Fa+1d2+MKW20150831#jmTaDZIYxpdskQqH.99\" target=\"_blank\">reported in the CodeDx Cybersecurity Market Report<\/a> that &#8220;the security industry is overly-focused on testing and scanning for known vulnerabilities in software after it&#8217;s been released, and is under-focused on poor software development practices that lead to vulnerability applications that hackers can exploit.&#8221;<\/p>\n<p><a href=\"http:\/\/news.sap.com\/author\/timclark\/\" target=\"_blank\">Tim Clark<\/a>, Head of Brand Journalism at SAP, <a href=\"http:\/\/www.forbes.com\/sites\/sap\/2015\/03\/10\/most-cyber-attacks-occur-from-this-common-vulnerability\/\" target=\"_blank\">wrote in a\u00a0Forbes article that<\/a> &#8220;it&#8217;s time for a reality check. Even if you figured out how to plug holes in your networks, the hackers may be gaining access through applications and solutions. Sure, many organizations have significant network security in place but it\u2019s not enough as 84% of all cyber-attacks are happening on the application layer.&#8221; \u00a0A <a href=\"https:\/\/www.us-cert.gov\/sites\/default\/files\/publications\/infosheet_SoftwareAssurance.pdf\" target=\"_blank\">similar estimate comes from the Department of Homeland Security<\/a>\u00a0which\u00a0estimated that 90 percent of security incidents originate from software application defects.<\/p>\n<p><a href=\"http:\/\/www.hp.com\/sbso\/hpinfo\/newsroom\/Jason_Schmitt_bio.pdf\" target=\"_blank\">Jason Schmitt<\/a>, vice president of\u00a0HP Enterprise Security Products,<a href=\"http:\/\/www.forbes.com\/sites\/sap\/2015\/03\/10\/most-cyber-attacks-occur-from-this-common-vulnerability\/\" target=\"_blank\"> said that<\/a> &#8220;hackers are really smart. \u00a0They understand where the most lucrative and easiest access to data and sensitive information is and that\u2019s by targeting the soft underbelly, which is the software that we push out and give to everyone without really thinking about how we\u2019re securing it from the inside.&#8221;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-it-blindsided-by-application-defects-the-cause-of-most-security-incidents%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Despite sophisticated security defenses that many IT departments build, data breaches at companies are much more likely to originate at the application level. Frank Zinghini, CEO of Applied Visions, reported in the CodeDx Cybersecurity Market Report that &#8220;the security industry<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/security-it-blindsided-by-application-defects-the-cause-of-most-security-incidents\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-5952","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5952","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=5952"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5952\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=5952"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=5952"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=5952"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}