Web-based Malware Attacks

By Stephanie Jordan
in

Purewire, Inc., a Web security software-as-a-service (SaaS) vendor that secures business and social interactions on the Web, earlier this month announced end-user survey results which illustrate severe vulnerabilities to corporate networks due to malware-infected Web applications, remote workers and shrinking IT budgets. According to the survey:

  • IT security professionals rate the Web as the number one entry point for malware into their networks.
  • Even so, nearly 40 percent of companies cannot successfully prevent users from installing Web applications, leaving them vulnerable to all sorts of attacks.
  • Of survey respondents, 20 percent work remotely at least part of the time. Of those remote workers infected with malware, nearly half of the infections came from the Web.
  • A user visiting infected Web sites is the most significant single threat vector.
  • More than 90 percent of those surveyed report that they will not see a budget increase for 2009, despite the increase in threats and vulnerabilities.
  • More than 70 percent of survey respondents use SaaS-based solutions for anti-virus and anti-spam, and 25 percent have implemented Web security as a service, indicating a clear shift toward SaaS-based security solutions.

Osterman Research conducted the survey of Web and messaging security professionals, eliciting 139 responses. The sample represents a strong cross-section of companies ranging in sizes and vertical markets, with an average of more than 15,000 employees accessing the Internet. “URL filtering is an important component of any Web security platform, but with a new domain name created every second, IT security professionals should look beyond traditional filters,” recommends Michael Osterman, principle of Osterman Research. “Malware-infected Web applications pose a serious threat to the corporate network since streaming applications bypass anti-virus engines and URL filters cannot scan and classify browser-based objects. Additionally, SaaS-based Web security solutions offer double the benefits of being highly effective against the latest generation of Web threats, while offering low up-front costs and predictable pricing.”

The full results of the survey are available from Purewire.

Published January 22, 2009