"Is the Computer Security Community Barking Up the Wrong Trees?".

The author discusses a discrepancy between the computer-security needs of average users and security issues that industry and researchers have largely focused their efforts on. Although hundreds of research papers exist about so-called "zero day" attacks in which hackers exploit software vulnerabili...

Full description

Bibliographic Details
Published in:Communications of the ACM Vol. 56; no. 6; pp. 10 - 12
Main Author: Hong, Jason
Format: Article
Published: Association for Computing Machinery Jun2013
Subjects:
Online Access:View this record in EBSCOhost
Description
Summary:The author discusses a discrepancy between the computer-security needs of average users and security issues that industry and researchers have largely focused their efforts on. Although hundreds of research papers exist about so-called "zero day" attacks in which hackers exploit software vulnerabilities for which no fix yet exists, research by software company Microsoft Corp. indicates such attacks accounted for less than 1% of incidents during the first half of 2011. Conversely, almost 45% of attacks involved unwise actions by users, such as inadvertently installing malware. Overall, the author believes human vulnerabilities should be given greater attention by those active in computer security.