| Sumario: | The author discusses a discrepancy between the computer-security needs of average users and security issues that industry and researchers have largely focused their efforts on. Although hundreds of research papers exist about so-called "zero day" attacks in which hackers exploit software vulnerabilities for which no fix yet exists, research by software company Microsoft Corp. indicates such attacks accounted for less than 1% of incidents during the first half of 2011. Conversely, almost 45% of attacks involved unwise actions by users, such as inadvertently installing malware. Overall, the author believes human vulnerabilities should be given greater attention by those active in computer security.
|