[ news_security_news ]
Spy Vs. Spy: Hackers Go After Computer Security Firms
John Stith
Staff Writer
2005-06-21
 Insider Reports RSS Feed
In the age of electronic security crimes, it looks like more problems get pointed out almost daily. Banks use third-party processors or don't encrypt their info and Windows has yet another vulnerability issue. Now, according to a recent study by the Yankee Group, companies that specialize in Internet and computer security are loaded with vulnerabilities, cracking them is profitable, and it's becoming more prevalent.
Traditionally, the Windows operating system received the blunt of the attacks either directly against Windows or one of its myriad tools like Outlook. Yankee says the trend of the future and pinnacle of hacker highs is cracking the security companies, who, they suggest, have been lackadaisical in working on their own vulnerabilities or at least discussing them.
"Security researchers-whether they wear white, gray or black hats-are increasingly less interested in poking holes in desktop operating systems," said Andrew Jaquith, Yankee Group senior analyst in Security Solutions & Services in a Yankee press release.
"A more fascinating and profitable area exists in finding vulnerabilities in the products meant to defend against the attacks themselves. It is time for the security vendors to stand up and make their own products more secure before they become preferred conduits for professionally designed malware."
Where Do They Get It
The question some may ask is how do these hackers get the information to do all the damage. They would say the same way you do. According to Yankee, they use all the tricks of modern business to get into computers and use them for all kinds of interesting things.
A study Yankee released last week called "Fear and Loathing in Las Vegas: The Hackers Turn Pro" said this is a black market industry with a "fully developed supply and demand chain."
According to the study, two major factors contributed to the proliferation of this industry: historical and chronic weaknesses in the monopoly desktop operating system, Microsoft Windows; and the adolescent enthusiasm of vulnerability researchers continually trying to one-up each other. So essentially, we see people who hate Microsoft and are loaded hacker testosterone and have blended the two for fun and profit.
From 2004 to May 2005 in particular, 77 disclosed vulnerabilities affected a wide array of security products. The incidents increased far faster than the rate for Microsoft.
When considering the number of affected products rather than just the number of distinct vulnerabilities, the rate of increase was as fast as that of the industry as a whole.
According to Yankee, vendors should review their security plans often. They've listed a variety of other steps on their website. In any event, the vulnerability of security is on the rise. They also suggested systems traditionally avoided like Linux and Apple OS X would also be the in for a rude awakening.
As always, vigilence is necessary because for hackers, it's always a case of "GAME ON!"
About the Author:
John is a staff writer for SecurityProNews covering cyber security.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
