A big majority (89%) of IT chiefs believe open-source software is as secure as proprietary software, according to a survey by IBM-owned Red Hat, the maintainer of Red Hat Enterprise Linux (RHEL). . Red Hat's findings in its The State of Enterprise Open Source report might settle a debate as old as the internet about whether open-source software is more or less secure than proprietary software, such as Windows. The argument for open-source software security has been that more people vetting publicly available source code can result in faster fixes compared to the 'security through obscurity' model – a term historically applied to proprietary software because the codebases could only be vetted by employees. . The latest results from Red Hat could potentially challenge established notions surrounding the security of open-source compared to closed-source software.. open Source Security, IT Survey, Red Hat Findings, Software Trust, Security Perception. . Brittany Day
Securing Free/Libre and open-source software (FLOSS) is a big deal and The Linux Foundation wants to know exactly how programmers are dealing with security issues. In an effort to gain insight on the topic, the Linux Foundation and Harvard have announced a new Linux and open-source contributor security survey. . Except for the desktop, Linux and open-source run the IT world. With great power comes great security responsibilities. While open-source security issues can be overstated , the simple truth is antique, insecure open-source software is everywhere . The Linux Foundation knows this. To address it, the Foundation's Core Infrastructure Initiative (CII) and the Laboratory for Innovation Science at Harvard (LISH) have developed a survey for FLOSS contributors . This builds on top of their "Vulnerabilities in the Core, a preliminary report and Census II of open-source software." The study laid out a methodology for understanding and addressing open-source software structural and security complexities. Specifically, it also identifies the most commonly used FLOSS components in production applications and examines them for potential vulnerabilities. . The Linux Foundation collaborates with Harvard to initiate a survey designed to assess the security protocols adopted by contributors in the open-source community.. Open Source Security, Linux Contributors, FLOSS Security, Software Insights. . LinuxSecurity.com Team
An astonishing number of survey respondents believe they are IT security leaders. But what does it really take to be a leader, and how does your organization stack up? A surprisingly high. That was one surprising finding of this year's annual Global Information Security Survey, conducted by CSO and CIO magazines in partnership with PricewaterhouseCoopers. More than 9,600 business and technology executives from around the world took the survey, and 43 percent of those surveyed believe their organizations are IT security leaders. The other categories respondents could choose from were strategist, tactician and follower. Obviously those enterprises, by definition, can't all be at the forefront of security. "Most of these 'leaders,' in my opinion, have a false sense of their level of security," says Mark Lobel, a principal in the advisory services division of PwC. The link for this article located at CSO Online is no longer available. . The Worldwide Cybersecurity Assessment uncovers unexpected findings regarding perceptions and methodologies of IT security governance.. IT Leadership, Security Survey, Organizational Insights. . Anthony Pell
Last issue we talked about the recent survey of IT managers concerning risk management in their enterprises conducted for Courion. Today we'll look at another recent survey which included IT managers -- and more.. Cyber-Ark has just released results of its fifth annual "Trust, Security and Passwords" survey, conducted in the spring of 2011 with 1,422 IT staff and C-level professionals across North America and EMEA (Europe, Middle East and Africa). One eye-opener was the extent to which IT personnel admitted to insider data breach: When asked if they had ever accessed information on a system that was not relevant to their role, 28% of North American IT staff respondents admitted to snooping, while an even greater number in EMEA, 44%, admitted to the same behavior. Similarly, 74% of North American respondents and 31% of EMEA respondents said that they or one of their colleagues had used an administrative password to access information that was otherwise confidential or sensitive. The link for this article located at Network World is no longer available. . Unveil pivotal findings from Cyber-Ark's security research, highlighting concerning behaviors from internal IT personnel.. Data Breach, Insider Threats, Security Survey, IT Management Insights. . LinuxSecurity.com Team
Nearly half of those who work in critical infrastructure systems worldwide expect their company to be targeted by a computer attack over the next year, a new survey has found.. About one-third of the respondents say their company is "extremely" prepared to deal with it, according to the survey (PDF) released today by security company Symantec. Another 36 percent to 41 percent (depending on the type of attack) say their company is "somewhat" prepared to deal with attacks that range from attempted theft and modification or destruction of data to shutting down computer networks and manipulating physical equipment through control networks. And 6 percent to 9 percent (depending on attack type) said their companies are "extremely unprepared" to deal with those various attacks. The link for this article located at CNET is no longer available. . A recent poll indicates that the majority of construction companies are confident in their defenses against cyber threats, showcasing differing levels of security measures.. Cyberattack Readiness, Critical Infrastructure Security, Attack Preparedness. . Alex
The security vendor today is touting its yearlong survey of 3,200 Web sites that purportedly shows 70% of them contained vulnerabilities that pose a medium- to high-level risk of an important data breach. "Without sounding apocalyptic, I believe the 70% figure should send tremors not just ripples in the market," says Kevin Vella, vice president of sales and operations, sounding apocalyptic in a press release. . I forwarded the release to my go-to guy on all security matters, Joel Snyder, a stalwart in the Network World Lab Alliance and senior partner at Opus One in Tucson, Ariz. "This is just sensationalist nonsense, not credible on its face, and dishonest in its goal of inspiring fear," Snyder says. And he's willing put his money behind his mockery. The link for this article located at NetworkWorld is no longer available. . A recent analysis uncovers that numerous online platforms could possess significant risk factors for data breaches. Discover more about the threats to digital safety.. web vulnerabilities, data protection, risk assessments. . LinuxSecurity.com Team
On the surface, the results of the 11th annual CSI/FBI Computer Crime and Security Survey are positive, with fewer companies reporting financial loss from data breaches compared to last year. But a majority of companies are still reluctant to report security breaches to law enforcement, suggesting that the survey isn't capturing the full extent of the problem. . The Computer Security Institute (CSI) and the San Francisco Federal Bureau of Investigation's (FBI) Computer Intrusion Squad released its 2006 report Thursday after surveying 616 computer security practitioners in U.S. corporations, government agencies, financial and medical institutions and universities. The average loss reported by respondents was $167,713, an 18% decrease over last year's average loss of $203,606. The link for this article located at Search Security is no longer available. . The Computer Security Institute (CSI) and the San Francisco Federal Bureau of Investigation's (FBI) . surface, results, annual, csi/fbi, computer, crime, security, survey, positi. . Brittany Day
According to our recent Security Staffing survey, IT security executives believe their organizatons are in greater jeopardy due to staffing shortages than their peers that oversee corporate security. Additionally, IT uses flex time and training as a motivator more so than corporate security executives. Corporate security organizations outsource more than IT security departments and the most frequently outsourced positions were security guards and guard management, while IT security were more likely to outsource data back up and biometrics. . Our study asked about both corporate security staffing issues and also IT security issues. The results shown here are based on the responses of 218 security professionals. Fifty-two percent of respondents had responsibility for IT security while 22 percent were in charge of corporate security. Twenty-six percent had responsibility for both. The link for this article located at CSOOnline is no longer available. . Our Security Personnel Assessment highlights significant challenges in IT and enterprise security workforce management, along with potential solutions for external services. Security Staffing, IT Security Challenges, Corporate Security, Outsourced Roles. . Benjamin D. Thomas
Get the latest Linux and open source security news straight to your inbox.