Quote

At considerable investment in time and resources, Verizon Business began an initiative in 2007 to identify a comprehensive set of metrics to record during each data compromise investigation. As a result of this effort, we pursued a post-mortem examination of over 500 security breach and data compromise engagements between 2004 and 2007 which provided us with the vast amount of factual evidence used to compile this study. This data covers 230 million compromised records. Amongst these are roughly one-quarter of all publicly disclosed data breaches in both 2006 and 2007, including three of the five largest data breaches ever reported.

For complete details please refer to the following link:

http://securityblog.verizonbusiness.com/2008/06/10/2008-data-breach-investigations-report/

This does make for interesting reading. It also would seem to fairly directly refute the "80% (or whatever the number was) of all attacks come from the inside" line.

EH-Net

Ethical Hacking Discussions and Related Certifications => Incident Response => Topic started by: nebu10uz on July 03, 2008, 05:26:37 PM