Top 10 security threats in 2008

By Victoria Ho, ZDNet Asia
Friday, November 16, 2007 09:00 PM

McAfee has released its top 10 security predictions for 2008, which include recurring online threats and a rise in communications-related threats targeting VoIP (voice over Internet protocol) and instant messaging platforms.

In a statement Friday, the security vendor also identified Windows Vista as an emerging threat. While take-up for Microsoft's latest operating system was not high this year, McAfee predicts that a rise in adoption next year will increase the risk of Vista-related threats.

Top 10 security threats for 2008:

1. Social networking and Web 2.0
The recent publicity of compromises and presence of malware on social networking sites, such as Salesforce.com, Monster.com and MySpace, shows a trend toward malicious attackers targeting these popular sites.

With the sites making it easier to access personal information, users are increasingly open to attacks, with the information shared lending the attacks "more authenticity", said McAfee.

The security vendor expects a "large increase" in Web 2.0 targets next year.

2. Botnets on the rise
With the fuss over the havoc that was created by the Storm worm this year, McAfee sees the proliferation of botnets continuing on into next year.

"Storm created the largest peer-to-peer botnet ever. [We] expect others to ride the coattails of that success, pushing up the number of PCs turned into bots," stated McAfee.

It has also been the "most versatile malware on record", with "thousands of variants... more infection methods and social engineering schemes than any other threat in history", said the company's release.

Aiding the proliferation of the botnets is the high-profile prosecution of bot herders this year--McAfee expects criminals to "seek better ways to cover their tracks", as a result.

3. Instant messaging
Although the occurrence of a "flash" worm spreading via instant messaging, and instantly infecting millions around the globe has not happened yet, McAfee believes the possibility is "closer than ever".

The number of vulnerabilities in popular instant messaging applications more than doubled this year compared to 2006, with 10 of those threats this year considered high-severity, while none last year were, according to the security company.

4. Online gaming
Virtual economies are seeing an increasing threat that is "outpacing the growth of the threat to the real economy", said McAfee, citing the rise in password-stealing Trojans targeting online communities compared to banks.

"As virtual objects continue to gain real value, more attackers will look to capitalize on this," said McAfee.

5. VoIP attacks on the rise
With more than double the number of security vulnerabilities reported for VoIP (Voice over Internet Protocol) this year compared to 2006, "it is clear that VoIP threats have arrived and there's no sign of a slowdown", said McAfee.

One reason for this is that defense strategies are currently lagging behind the relatively new technology, explained McAfee, which expects a 50 percent increase in VoIP-related threats in 2008.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Configure Apache to support multiple SSL sites on a single IP address

Open Source

With Apache 2.2.12 and support for the Server Name Indication extension to the SSL protocol, you can configure name-based HTTPS sites, just as you can name-based HTTP sites.


Read more »



Amendments to empower Copyright Tribunal

Blog thumbnail

As a lawyer, I often inform my clients about the need to clear licenses with the various licensing societies whenever they use works belonging to other parties. This is especially..... by Bryan Tan

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web