Profit motive

"The most common thread to new cyber-treats is the financial driver," says Frost & Sullivan security analyst James Turner. "The emergence of phishing and spyware are examples where a threat has become focused and lucrative. The bottom line for many of the current attacks is that if the perpetrators did not see a pot of gold at the end of the rainbow they would channel their efforts elsewhere."

Turner points out that in a recent Australian Information Security Satisfaction Monitor (AISSM) survey, 76 percent of respondents reported incidents of viruses and worms, and 57 percent reported spyware on multiple machines. Compiled from the responses of 269 IT "decision makers" at companies with 100 employees or more, the survey also reports that a further 22 percent of respondents had discovered illegitimately installed keyloggers on their systems.

"Malware is certainly widespread," Turner says. "I think the interesting aspect of current malware is that we're working against people that have similar motivations to us. We work to make money, and they write malware to make money."

Turner stresses the need for IT managers to continue to run the traditional security technologies like antivirus and firewalls. He also says that intrusion prevention systems (IPS) are becoming very popular in Australia, and they rated high satisfaction levels in the AISSM survey.

"The key for IT managers is to identify where the really important business data and systems are, and then ensure that these are protected at a level commensurate with their importance," Turner says.

"IT managers should consider outsourcing some of their security functions. Security is a specialty area and resources in Australia are thin on the ground. Managed security service providers are stepping into the gap and providing services that range from purely offering 'clean pipe', through to high-end security consulting and everything in between."