TruSecure, which surveyed 2500 organisations as part of its 2001 Information Security Industry Survey, said almost half of them were hit by a Web server attack in 2001 -- nearly double the number in 2000.
The survey also found that although corporate spending on computer security is increasing, cyberattacks and viruses frequently cripple organisations, with 90 percent of survey respondents being infected by viruses, worms and Trojans despite 88 percent of them already having antivirus protection in place.
According to filtering software provider SurfControl one in every 300 emails now virus-infected.
-The growth in email-borne viruses has been phenomenal. According to MessageLabs, one in 300 emails is now likely to be virus infected, as against one in every 700 in October last year - that's a 133 percent increase in just 12 months," SurfControl Australia MD Charles Heunemann said.
And with the number of emails sent on an average day expected to hit 10 billion this year -- a figure which is expected to triple by 2005, according to IDC - email, one of the most important business communications tools, also presents one of the greatest organisational security risks, Heunemann added.
Janteknology's Glenn Miller believes the recent Nimda virus - which attacks through email, through servers or through Internet browsers and also constantly reinfects an entire network from any infected workstation -- heralds the arrival of a new type of malicious code for which there is no single counter measure.
-To protect their systems from such a sweeping attack, companies need to urgently put in place equally intensive counter measures," Miller said. -There is no single counter measure to protect against this multiple attack class of code.
According to Miller, filtering software should be installed to protect against viruses being transmitted via emails and an application-specific firewall, which has an in-built intrusion detection system and egress filtering, is -the most comprehensive protection for the IIS server".
Furthermore, where Web site infection occurs, there must be immediately accessible measures in place to recover and restore the Web site and network configuration to pre-attack status, Miller added.
-This is very nasty stuff we are seeing now. Nimda has achieved, if achieved is the right word, the damage that we all feared possible from Code Red but which did not eventuate in that case."
IIS is not safe.
If security is an issue than don't use IIS.
>According to Miller, filtering software should be installed to protect against viruses being transmitted via emails and an application-specific firewall, which has an in-built intrusion detection system and egress filtering, is “the most comprehensive protection for the IIS server”.