Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Boot Sector Rootkit Targets XP | Main | IRS Struggles with Security Issues »

How Do You Rank in Unpathed Applications?

It looks like auto-updates are not enough to keep users secure. Secunia is reporting in a company blog statistics they've gathered from customers using their free Personal Software Inspector (PSI) vulnerability scanning application. The stats look bad in general but I'm curious about the break down by user type and application. For example, about 42% have 11 or more insecure apps. Are these corporate PCs or home PCs? What kind of applications are not patched and how severe are the vulnerabilities? How about classifying by what is required to exploit the vulnerability (e.g. admin rights required).

Anyway, not to look a gift horse in the mouth, I think the more good quality data we have on security, the better because we know where to focus on energies. Here's some of the breakdown from Secunia:

The total number of computers/users is 20,009, out of these 95.46% have 1 or more insecure applications installed on their computers - 95 out of a 100 computers that are connected to the Internet have insecure software installed.

By "insecure application" it is understood, that there is a newer version available from the vendor of the application that corrects one or more vulnerabilities, but the user have yet to install the secure version.

Number of insecure applications per computer/user:
0 Insecure Applications: 4.54% of computers
0-5 Insecure Applications: 27.83% of computers
6-10 Insecure Applications: 25.69% of computers
11+ Insecure Applications: 41.94% of computers

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/589

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net