Cyber-Attackers Most Often Target Nine Business Apps: Research Report

[InfoSec News <alerts () infosecnews org>]

http://www.eweek.com/security/cyber-attackers-most-often-target-nine-business-apps-research-report/

By Robert Lemos
eWEEK.com
2013-02-23

An analysis of exploit and malware traffic inside corporate networks found that 
social networks account for few attacks, while 97 percent of exploit traffic 
focused on 10 applications, nine of which were critical business applications.

The analysis of log data from 3,056 companies underscores that internal 
corporate applications, not multimedia and social-networking applications, are 
the focus of attackers, said Matt Keil, a senior research analyst with Palo 
Alto Networks, which compiled the report.
Attackers directed most of their malicious traffic at ports used for 
communication with Microsoft's SQL and remote procedure calls (RPC), Web 
browsers and the Server Message Block (SMB) protocol, a common way of sharing 
access to file servers and printers, according to the report.

The other network and application access protocols include Active Directory, 
Domain Name System (DNS), Microsoft Office Communicator, Microsoft SQL Monitor 
and Session Initiation Protocol (SIP).

[...]


______________________________________________
Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!
http://www.shopinfosecnews.org