Feeds

UK.plc struggles to eradicate viral infection

Malware remains top security nuisance

Top 5 reasons to deploy VMware with Tegile

Viral infection was the biggest single cause of security incidents over the last two years, according to a DTI-backed study published on Tuesday.

The DTI's biennial Information Security Breaches survey found that viral infection caused roughly half of security incidents reported. Two in five viral infestations were said to have caused a serious impact on the organisations affected.

The study also found that viruses were more likely to cause service disruptions than other security breaches. While interruptions generally had minimal impact, a quarter of firms that blamed viral infestation for the worst security incident had major problems, such as losing important services (for example email), for more than a day.

Almost all the 1,000 UK companies that participated in the survey use anti-virus software. Although malware continues to be a problem for UK plc infection rates, the survey says it has dropped by roughly a third since two years ago.

However, on a less encouraging note, 20 per cent of firms questioned said they do not update signature files (used to protect against viruses) within a day.

Two years ago, a small number of viruses were the root of business concerns, but last year attacks featuring Trojans and botnet clients became a bigger problem. The study found that viral infections tend to take more work to resolve than other incidents. One such incident took a company 50 days to fix.

The telephone survey also found that around a quarter of UK businesses are not protecting themselves against spyware.

Meanwhile, patching practices are slowly improving. Nearly nine in ten UK businesses (88 per cent) apply new operating system security updates within a week of their release, compared with 79 per cent of businesses in 2004. Firms that install patches within a day, unsurprisingly, suffered fewer viral infections than those that wait even a week.

A consortium led by PricewaterhouseCoopers LLP managed the 2006 Information Security Breaches survey. Other lead sponsors are Microsoft, Symantec, Entrust and Clearswift. Input has also come from the National Hi-Tech Crime Unit, Royal Holloway, University of London and the Information Security Forum.

Chris Potter, the partner from management consultancy PricewaterhouseCoopers leading the survey, said: "It's very encouraging to see the progress that UK companies have made in installing anti-virus software and patching their systems. However, there's a danger of fighting yesterday's battle. Past viruses were designed to cause large amounts of indiscriminate damage typically by taking down targets' networks. Cyber-criminals now use virus infections to get in under the radar of businesses and steal confidential data."

The full results of the survey will be published at the Infosecurity Europe exhibition and conference in London, which takes place between 25 and 27 April. ®

Internet Security Threat Report 2014

More from The Register

next story
'Kim Kardashian snaps naked selfies with a BLACKBERRY'. *Twitterati gasps*
More alleged private, nude celeb pics appear online
Home Depot ignored staff warnings of security fail laundry list
'Just use cash', former security staffer warns friends
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Snowden, Dotcom, throw bombs into NZ election campaign
Claim of tapped undersea cable refuted by Kiwi PM as Kim claims extradition plot
Freenode IRC users told to change passwords after securo-breach
Miscreants probably got in, you guys know the drill by now
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.