Securities Industry News

Software The eternal battlefield in the unending cyberwars
Monday, 27, April 2009

We are at risk. Computers are vulnerable to the effects of poor design, insufficient quality control, accident and, perhaps more alarmingly, to deliberate attack." -- Computers at Risk, Computer Science and Telecommunications Board, National Research Council, 1991. Now, 18 years later, we are still at risk. Our computers are still vulnerable. They still suffer attacks enabled by poor design and insufficient quality control. We spend huge sums on IT security, yet U.S. companies and individuals are loosing tens of billions of dollars annually to cybercrime. In January, Heartland Payment Systems Inc. reported what may be the largest data heist ever.The company said that a "global cyberfraud operation" stole information from more than 100 million credit cardholders. Someone had planted a software "sniffer" in a Heartland server disk, where it apparently nosed around undetected for weeks.

These mega-breaches make big news and cause their victims big pain. But they are just the tip of a huge cybercrime iceberg. Last September, Gartner Inc. published a chilling case study about The Procter & Gamble Co. , a business known for its sophistication in IT and one with a robust deployment of firewall, intrusion detection and antivirus software tools. P&G conducted a six-month worldwide audit of its PCs to see if any were infected by hidden software robots, or bots, which can connect into botnets secretly controlled by external parties. Using special sensor software, P&G discovered that some 3,000 of its 80,000 PCs were infected with botnet clients. These bots were attempting to communicate with a dozen remote-control sites, with about 20% of those attempts getting through P&G security measures.