"Is the Computer Security Community Barking Up the Wrong Trees?".

The author discusses a discrepancy between the computer-security needs of average users and security issues that industry and researchers have largely focused their efforts on. Although hundreds of research papers exist about so-called "zero day" attacks in which hackers exploit software vulnerabili...

Descripción completa

Detalles Bibliográficos
Publicado en:Communications of the ACM Vol. 56; no. 6; pp. 10 - 12
Autor principal: Hong, Jason
Formato: Artículo
Publicado: Association for Computing Machinery Jun2013
Materias:
Acceso en línea:Ver este registro en EBSCOhost
Descripción
Sumario:The author discusses a discrepancy between the computer-security needs of average users and security issues that industry and researchers have largely focused their efforts on. Although hundreds of research papers exist about so-called "zero day" attacks in which hackers exploit software vulnerabilities for which no fix yet exists, research by software company Microsoft Corp. indicates such attacks accounted for less than 1% of incidents during the first half of 2011. Conversely, almost 45% of attacks involved unwise actions by users, such as inadvertently installing malware. Overall, the author believes human vulnerabilities should be given greater attention by those active in computer security.