Rethink Web 2.0 security, Gartner warns

By Victoria Ho, ZDNet Asia
Thursday, August 16, 2007 04:51 PM

Web 2.0 technologies will bring "significant security risks", according to a recent release from Gartner.

Businesses should re-examine their IT security frameworks and take action early to limit risks, the report said Wednesday.

Joseph Feiman, vice president and Gartner fellow, said in a statement that many of the concepts run contrary to traditional IT security practices.

He was referring to how the use of Web 2.0 services requires more participation from users, and a corresponding need for enterprises to free up control to allow users to use the services effectively.

This challenge poses inbound risks such as malicious code in RSS (Really Simple Syndication) feeds. There is also a risk that information will be leaked through inappropriate blogging or sharing through collaboration sites, Feiman said.

On limiting the risks when building Web 2.0 applications, Feiman said that an enterprise should "adopt a secure development life cycle and focus on validating all input, whether it is from an internal user or business partner."


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Use shades of gray to enhance scale in Excel

Microsoft Office Suite

Excel's palette is generous, but don't throw buckets of pigment all over your spreadsheets just because you can.


Read more »



Ultimate 2012 recovery site: the moon

Blog thumbnail

Have you seen the disaster movie "2012"? A friend from Control Risks and I did, and we reluctantly concluded we wouldn't be able to write off the cost of our..... by Nathaniel Forbes

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web