|
|
Home > Computers and Information Technology > Software > Security & Privacy
World Vulnerability Research Markets
|
| Published Date:
April 2008
Published By:
Frost & Sullivan
Page Count:
133
Order Code:
R1-6381
|
|
|
|
This Frost & Sullivan research service titled 2007 World Vulnerability Research Markets examines the entire vulnerability research market including government, educational, corporate, and individual contributors, providing in-depth analysis and insightful perspectives.
This analysis is available through our Network Security Growth Partnership Service program. With this program, clients receive industry-leading market research such as this, along with technical and econometric data and many interactive features including Analyst Inquiry Time and Client Council.
Growing Complexity of Security Threats Necessitate Vulnerability Research
Network and communication technology is the backbone of business all over the world and yet the value of such systems is largely unrealized until they come under attack. Past attacks have shown that the consequences for inadequate protection can be dire. The disruption of these systems has inflicted billions of dollars in lost revenues over the years. These attacks, which were originally carried out as a show of skill, are now calculated attacks by complex criminal organizations. Consequently, there is now a very real demand for the security vulnerabilities that these attacks are based upon. Security companies and researchers that disclose this information to the appropriate software vendor are the first line of defense against cyber terrorists and attacks.
Since Frost & Sullivan has been tracking this market, the number of disclosed vulnerabilities has steadily increased. The number of reported vulnerabilities increased 24 percent from 2006 to 2007 and this number is expected to continue increasing. The percent of vulnerabilities disclosed by software vendors has dropped slightly from 2006 (8 percent), and is still a nominal portion of total disclosures "The low percentage of self-disclosures may be indicative of the fact that software vendors are not testing their products adequately or are likely to develop a patch, but not publicly disclose the vulnerability," notes the analyst of this research service. "This is a dangerous practice as malicious researchers are able to reverse engineer a patch to derive the nature of the vulnerability and know about the vulnerability before systems administrators do."
Windows Remains a Prime Target
Of the operating systems, Windows was affected by half of the vulnerabilities disclosed (50 percent). Windows still boasts the most prevalent operating systems (over 90 percent of desktops and 35 percent of servers) and is the premier target for hackers. However, the percentage of third party/hardware vulnerabilities increased from 2006. With regard to Mac OS X, most vendors, with the exception of VeriSign, disclosed only a negligible number of Mac OS X vulnerabilities. Mac OS X is perceived as having a higher level of security than other operating systems, but also enjoys a small market share. Hence, it is not a lucrative target for hackers. Furthermore, Mac OS X appears to be gaining some of its vulnerabilities from the UNIX-based kernel.
Overall, TippingPoint and VeriSign, which have contributor compensation programs, reported 44 percent of all vulnerabilities reported by vendors. Almost half (47 percent) of vulnerability disclosures by vendors are coming from vendors without contribution programs. "While TippingPoint and Secunia demonstrated healthy growth in 2007, VeriSign showed the strongest growth," says the analyst.
|
Similar Products
• Security Software, Hardware & Management Market 2007-2010 - Bundled Report
Published Oct 2008 by Infiniti Research Limited
• Security Software & Security Management Market 2007-2010 - Bundled Report
Published Oct 2008 by Infiniti Research Limited
• Security Software & Security Hardware Market 2007-2010 - Bundled Report
Published Oct 2008 by Infiniti Research Limited
• UK Access Control Market Development
Published Sep 2008 by Market and Business Development
• Japan IT Security 2008-2012 Forecast and 2007 Analysis: Hardware, Software and Services
Published Sep 2008 by IDC
• The US Regulators Issue Identity Theft Prevention Rules: Cutting Through the Red Flags Red Tape
Published Sep 2008 by TowerGroup
• Plimsoll Analysis- Secure Payment Solutions (UK)
Published Sep 2008 by Plimsoll Publishing Ltd.
• Plimsoll Analysis- IT Security (UK)
Published Sep 2008 by Plimsoll Publishing Ltd.
• Symantec: After More Consumer Tools
Published Aug 2008 by IDC
• INTRUST Implements F5 Networks BIG-IP
Published Aug 2008 by IDC
|
|
|
|
0 items
