Internet criminals operating like successful businesses
ConvergenceAsia staff
15/07/2009

Cisco, the leading supplier of networking equipment and network management for the Internet, has released the Cisco 2009 Midyear Security Report, which shows that Internet criminals are increasingly operating like successful businesses, borrowing some of the best strategies from legitimate companies and forming partnerships with one another to help make their illegal activities more lucrative.

The midyear edition outlines some of the most common technical and business strategies that criminals use to breach corporate networks, compromise Web sites, and steal personal information and money.

In the report, Cisco offers recommendations for protecting against some of the newer types of attacks that have surfaced recently, recommendations that incorporate people, processes and technology as a holistic risk management solution. The report also advises heightened vigilance against some “old school” approaches that are just as sophisticated and prevalent as newer threats.

Patrick Peterson, Cisco fellow and chief security researcher, said securing the Internet has long been a moving target as criminals develop increasingly sophisticated ways to breach corporate networks and obtain valuable personal data.

“What is striking in our latest findings is how, in addition to using their technical skills to cast a wide net and avoid detection, these criminals are also demonstrating some strong business acumen. They are collaborating with each other, preying on individuals’ greatest fears and interests, and increasingly making use of legitimate Internet tools like search engines and the software-as-a-service (SaaS) model.”

Some also continue to succeed using well-documented methods that in recent years have been downplayed as threats given the preponderance of new tactics, he added. “With criminals being so quick to identify weaknesses both in online networks and in consumers’ psyches, businesses need to adopt ever more advanced ways to fight cybercrime and remain vigilant across all attack vectors.”

For the full Cisco 2009 Midyear Security Report, visit http://cisco.com/en/US/prod/vpndevc/annual_security_report.html.

advertisement