Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Database Security >> Database Security >> 2010 data breach investigations report
        
(Message started by: Pete Finnigan on Nov 11^th, 2010, 4:55pm)

Title: 2010 data breach investigations report
Post by Pete Finnigan on Nov 11^th, 2010, 4:55pm

Has anyone read Verizon Business' 2010 data breach investigations report yet?
http://www.verizonbusiness.com/resources/reports/rp_2010-data-breach-report_en_xg.pdf

I know it is out since july this year, but still. It is a very interesting document. It shows for example that only 21% of hacked organizations that should have been PCI DSS compliant actually were PCI DSS compliant.

It also shows that the database server is nowadays the most prefered place of attack. 92% of stolen data had been gotten from a database server.

The document also has interesting statistics about inside vs. outside attacks and the complexity of the attacks.

I recommend reading it, especially when security awareness is low at your workspace.