My express news

Report shows more insiders involved in cyber crime

The 2010 Verizon Data Breach Investigations give out, based partly on information provided by the US Secret Service, has base that data breaches in 2009 involved more insider threats, greater practice of social engineering and the continued strong involvement of organised iniquitous groups.

Stolen credentials were the most common way of gaining unauthorised gain to organisations last year, highlighting insufficient security practices for individuals and organisations. Organised tending to crime groups were responsible for 85 per cent of all stolen facts last year, the report said.

It also stated that most breaches could esteem been avoided if basic security measures had been in place. Only four by means of cent of breaches required difficult and expensive protective measures.

Matthijs front der Wel, managing principal for the forensics team at Verizon, explained for what reason an organisation can detect breaches.

"You find the breaches in the log files," declared van der Wel. "Typically where there's a data non-observance, the number of log lines in the file increases significantly. Or the log lines themselves gain much longer, [showing that] someone is attempting an SQL injection."

An SQL or continuation injection occurs when someone maliciously inputs a command into a webform, what one. could ask the database for a list of usernames and passwords. A somewhat ill written webform will send this command directly to the database to what it will be executed.

Van der Wel had the following notification for organisations looking to secure their data from attack:

Restrict and overseer privileged users. They should only have access to information where there is a business need. Criminals are increasingly using privileged user intelligence in their attacks, which is hard to trace.

Take minor wisdom violations seriously. Typically in a serious case of insider cyber embezzlement, the insider has a long history of minor violations. This can lead to more serious crimes.

Be efficient in removing access privileges from accounts what one. have been compromised, or where the user has left.

Consider newer technology. There is nay reason to be working with usernames and passwords in 2010. Two-factor authentication offers a more secure alternative for sensitive information.