Larry Rogers, a senior member of the technical staff at the US-based CERT Coordination Centre, told ZDNet Australia that for the 2001 calendar year, there were 2437 vulnerabilities reported. This compares with 1090 reported in 2000.
For the first three months of this year, 1065 had been reported, Rogers said.
What is responsible for such alarming growth in reported system vulnerabilities?
Rogers believes that there has been an increased awareness of security issues amongst businesses for a variety of reasons, including the September 11 terror attacks on the United States.
Threats posed by vulnerabilities have been on the radar of Australian businesses over recent months. Last week a Danish security research organisation warned users of a recently-discovered software flaw which could leave their systems open to malicious code carried on Web pages or in e-mails.
There has also been an alert about a BIND vulnerability which could trigger a denial-of-service attack, and a growing number of virus warnings.
The CERT Coordination Centre, which studies Internet security vulnerabilities, handles computer security incidents and publishes security alerts, published 37 advisories during 2001, up from 26 for the previous year, Rogers said.
He said advisories were issued in response to both program vulnerabilities or configuration errors. "In some cases the person who finds it will report it to us, or we may read about it on some of the more widely known e-mail lists," he explained. Vendors also report problems to CERT, Rogers said, which it then shares anonymously with other vendors before issuing an advisory.
According to Rogers, the vast majority of its constituency were professional system administrators, although others such as vendors also subscribe to its lists.
