Security - Channel Insider
Empowering the next generation Channel

Security vs. Coffee Spending: 10 Reasons Why Web Applications Are Easy Targets

By Ericka Chickowski on 2011-03-16



Are your customers spending more money on coffee than they are on keeping their websites secure? Chances are high that they are, according to a recent report out from the Ponemon Institute. Conducted on behalf of Cenzic and Barracuda Networks, the survey questioned over 600 IT security practitioners in a range of industries. The findings show that even though website attacks are a big concern and potential cost for companies, companies are still not spending much on web application security.

  • of
While 73 percent of the organizations in the study have been hacked at least once in the last 24 months, 72 percent of the respondents test less than 10 percent of their applications.

Twenty percent of organizations do not test their web applications for vulnerabilities at all.

Forty percent of organizations test only 5 percent of their Web applications.

The extrapolated average for all Web applications that are being tested by organizations was estimated to be 13 percent. The main reasons for not testing their Web applications are a lack of budget and expertise.

Of those that do test, only 13 percent test their applications in production.

Twenty-one percent of respondents did not know how long it takes to fix one vulnerability and 6 percent say they are never able to fix these vulnerabilities.

Decisions to fix Web application vulnerabilities are made informally (46 percent of respondents) or there is no effort to prioritize (29 percent).

Eighty-eight percent of respondents say the coffee budget is bigger — about $30 per employee per month — than web application security spending .

Sixty-nine percent of respondents rely upon network firewalls to secure Web applications.

Only 29 percent of the IT practitioners believe web application firewalls are critical to security infrastructure.

  • More slideshows

 
CHANNEL RESOURCE CENTER
 
 
 

Intel Technology Provider Program

Intel Technology Provider Program (ITP) helps resellers better understand Intel products which power the technology they sell, and enables value-add services such as remote manageability or anti-theft tracking.
Learn More
 
WindowsForDevices.com
WindowsForDevices.com is the comprehensive news site covering Windows embedded technologies. Visitors get news, technical white papers, opinion columns and extensive directories covering the products and companies in the marketplace.
Click Here
 
Check out our top five picks for technologies that will change the game in enterprise computing.
Learn MoreClick Here