Feeds

UK.plc struggles to eradicate viral infection

Malware remains top security nuisance

The Essential Guide to IT Transformation

Viral infection was the biggest single cause of security incidents over the last two years, according to a DTI-backed study published on Tuesday.

The DTI's biennial Information Security Breaches survey found that viral infection caused roughly half of security incidents reported. Two in five viral infestations were said to have caused a serious impact on the organisations affected.

The study also found that viruses were more likely to cause service disruptions than other security breaches. While interruptions generally had minimal impact, a quarter of firms that blamed viral infestation for the worst security incident had major problems, such as losing important services (for example email), for more than a day.

Almost all the 1,000 UK companies that participated in the survey use anti-virus software. Although malware continues to be a problem for UK plc infection rates, the survey says it has dropped by roughly a third since two years ago.

However, on a less encouraging note, 20 per cent of firms questioned said they do not update signature files (used to protect against viruses) within a day.

Two years ago, a small number of viruses were the root of business concerns, but last year attacks featuring Trojans and botnet clients became a bigger problem. The study found that viral infections tend to take more work to resolve than other incidents. One such incident took a company 50 days to fix.

The telephone survey also found that around a quarter of UK businesses are not protecting themselves against spyware.

Meanwhile, patching practices are slowly improving. Nearly nine in ten UK businesses (88 per cent) apply new operating system security updates within a week of their release, compared with 79 per cent of businesses in 2004. Firms that install patches within a day, unsurprisingly, suffered fewer viral infections than those that wait even a week.

A consortium led by PricewaterhouseCoopers LLP managed the 2006 Information Security Breaches survey. Other lead sponsors are Microsoft, Symantec, Entrust and Clearswift. Input has also come from the National Hi-Tech Crime Unit, Royal Holloway, University of London and the Information Security Forum.

Chris Potter, the partner from management consultancy PricewaterhouseCoopers leading the survey, said: "It's very encouraging to see the progress that UK companies have made in installing anti-virus software and patching their systems. However, there's a danger of fighting yesterday's battle. Past viruses were designed to cause large amounts of indiscriminate damage typically by taking down targets' networks. Cyber-criminals now use virus infections to get in under the radar of businesses and steal confidential data."

The full results of the survey will be published at the Infosecurity Europe exhibition and conference in London, which takes place between 25 and 27 April. ®

Build a business case: developing custom apps

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
iWallet: No BONKING PLEASE, we're Apple
BLE-ding iPhones, not NFC bonkers, will drive trend - marketeers
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
Tor attack nodes RIPPED MASKS off users for 6 MONTHS
Traffic confirmation attack bared users' privates - but to whom?
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.