Are your customers spending more money on coffee than they are on keeping their websites secure? Chances are high that they are, according to a recent report out from the Ponemon Institute. Conducted on behalf of Cenzic and Barracuda Networks, the survey questioned over 600 IT security practitioners in a range of industries. The findings show that even though website attacks are a big concern and potential cost for companies, companies are still not spending much on web application security.
of
While 73 percent of the organizations in the study have been hacked at least once in the last 24 months, 72 percent of the respondents test less than 10 percent of their applications.
Twenty percent of organizations do not test their web applications for vulnerabilities at all.
Forty percent of organizations test only 5 percent of their Web applications.
The extrapolated average for all Web applications that are being tested by organizations was estimated to be 13 percent. The main reasons for not testing their Web applications are a lack of budget and expertise.
Of those that do test, only 13 percent test their applications in production.
Twenty-one percent of respondents did not know how long it takes to fix one vulnerability and 6 percent say they are never able to fix these vulnerabilities.
Decisions to fix Web application vulnerabilities are made informally (46 percent of respondents) or there is no effort to prioritize (29 percent).
Eighty-eight percent of respondents say the coffee budget is bigger — about $30 per employee per month — than web application security spending .
Sixty-nine percent of respondents rely upon network firewalls to secure Web applications.
Only 29 percent of the IT practitioners believe web application firewalls are critical to security infrastructure.
Intel Technology Provider Program
Intel Technology Provider Program (ITP) helps resellers better understand Intel products which power the technology they sell, and enables value-add services such as remote manageability or anti-theft tracking. Learn More
WindowsForDevices.com
WindowsForDevices.com is the comprehensive news site covering Windows embedded technologies. Visitors get news, technical white papers, opinion columns and extensive directories covering the products and companies in the marketplace. Click Here