internet security tHreAt rePOrt GOVernMent 2013

Recommendations

Info

p. 2 Symantec Corporation Internet Security Threat Report 2013 :: Volume 18 CONTENTS 03 Introduction 04 Executive Summary 06 2012 Security Timeline 09 2012 in Numbers 13 Targeted Attacks, Hacktivism, and Data Breaches 14 Introduction 14 Data 17 DDoS Used as a Diversion 17 Data Breaches 19 Analysis 19 Cyberwarfare, Cybersabotage, and Industrial Espionage 20 Advanced Persistent Threats and Targeted Attacks 20 Social Engineering and Indirect Attacks 21 Watering Hole Attacks 23 Vulnerabilities, Exploits, and Toolkits 24 Introduction 24 Data 26 Analysis 26 Web-based Attacks on the Rise 27 The Arms Race to Exploit New Vulnerabilities 27 Malvertising and Website Hacking 28 Web Attack Toolkits 29 Website Malware Scanning and Website Vulnerability Assessment 29 The Growth of Secured Connections 29 Norton Secured Seal and Trust Marks 29 Stolen Key-signing Certificates 31 Social Networking, Mobile, and the Cloud 32 Introduction 32 Data 35 Analysis 35 Spam and Phishing Move to Social Media 37 Mobile Threats 38 Cloud Computing Risks 40 Malware, Spam, and Phishing 41 Introduction 42 Data 42 Spam 45 Phishing 46 Malware 48 Website Exploits by Type of Website 49 Analysis 49 Macs Under Attack 50 Rise of Ransomware 51 Long-term Stealthy Malware 51 Email Spam Volume Down 51 Advanced Phishing 53 Looking ahead 56 Endnotes 57 Appendix
p. 3 Symantec Corporation Internet Security Threat Report 2013 :: Volume 18 Introduction Symantec has established some of the most comprehensive sources of Internet threat data in the world through the Symantec Global Intelligence Network, which is made up of approximately 69 million attack sensors and records thousands of events per second. This network monitors threat activity in over 157 countries and territories through a combination of Symantec products and services such as Symantec DeepSight Threat Management System, Symantec Managed Security Services and Norton consumer products, and other third-party data sources. In addition, Symantec maintains one of the world’s most comprehensive vulnerability databases, currently consisting of more than 51,644 recorded vulnerabilities (spanning more than two decades) from over 16,687 vendors representing over 43,391 products. Spam, phishing, and malware data is captured through a variety of sources, including the Symantec Probe Network, a system of more than 5 million decoy accounts; Symantec.cloud and a number of other Symantec security technologies. Skeptic, the Symantec.cloud proprietary heuristic technology, is able to detect new and sophisticated targeted threats before reaching customers’ networks. Over 3 billion email messages and more than 1.4 billion Web requests are processed each day across 14 data centers. Symantec also gathers phishing information through an extensive antifraud community of enterprises, security vendors, and more than 50 million consumers. Symantec Trust Services provides 100 percent availability and processes over 4.5 billion Online Certificate Status Protocol (OCSP) look-ups per day, which are used for obtaining the revocation status of X.509 digital certificates around the world. These resources give Symantec’s analysts unparalleled sources of data with which to identify, analyze, and provide informed commentary on emerging trends in attacks, malicious code activity, phishing, and spam. The result is the annual Symantec Internet Security Threat Report, which gives enterprises, small businesses, and consumers the essential information to secure their systems effectively now and into the future.
Page 1: internet security tHreAt rePOrt GOV
Page 5 and 6: p. 5 Symantec Corporation Internet
Page 53 and 54:
p. 53 Symantec Corporation Internet
Page 55 and 56:
Page 57 and 58:
internet security tHreAt rePOrt APP
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
p. 101 Symantec Corporation Interne
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
show all

internet security tHreAt rePOrt GOVernMent 2013

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?