Showing posts with label Infonetics. Show all posts
Showing posts with label Infonetics. Show all posts

Monday, May 16, 2011

Security Vulnerabilities Are At All Time Highs for Mobile Devices

Enterprise and consumer mobile devices are being exposed to a record number of security threats, including a 400 percent increase in Android malware, as well as highly targeted Wi-Fi attacks, according to a report.

With smartphones set to eclipse PCs as the preferred method of both personal and professional computing, cyber criminals have turned their attention to mobile devices. At the same time, the gap between hacker capabilities and an organization's defenses is widening. These trends underscore the need for further mobile security awareness, as well as more stringent, better integrated mobile security policies and solutions.

Key report findings:

--  App Store Anxiety: The single greatest distribution point for mobile malware is application download, yet the vast majority of smartphone users are not employing an antivirus solution on their mobile device to scan for malware
--  Wi-Fi Worries: Mobile devices are increasingly susceptible to Wi-Fi attacks, including applications that enable an attacker to easily log into victim email and social networking applications
--  The Text Threat: 17 percent of all reported infections were due to SMS trojans that sent SMS messages to premium rate numbers, often at irretrievable cost to the user or enterprise
--  Device Loss and Theft: 1 in 20 Juniper customer devices were lost or stolen, requiring locate, lock or wipe commands to be issued
--  Risky Teen Behavior: 20 percent of all teens admit sending inappropriate or explicit material from a mobile device
--  "Droid Distress": The number of Android malware attacks increased 400 percent since Summer 2010
       
Comment from Jeff Wilson, principal analyst, security, at Infonetics Research: The last 18 months have produced a non-stop barrage of newsworthy threat events, and while most had been aimed at traditional desktop computers, hackers are now setting their sights on mobile devices. Operating system consolidation and the massive and growing installed base of powerful mobile devices is tempting profit-motivated hackers to target these devices. In a recent survey of large businesses, we found that nearly 40 percent considered smartphones the device type posing the largest security threat now. Businesses need security tools that provide comprehensive protection: from the core of the network to the diverse range of endpoints that all IT shops are now forced to manage and secure.

Comment from Dan Hoffman, chief mobile security evangelist at Juniper Networks: These findings reflect a perfect storm of users who are either uneducated on or disinterested in security, downloading readily available applications from unknown and unvetted sources in the complete absence of mobile device security solutions. App store processes of reactively removing applications identified as malicious after they have been installed by thousands of users is insufficient as a means to control malware proliferation. There are specifics steps users must take to mitigate mobile attacks. Both enterprises and consumers alike need to be aware of the growing risks associated with the convenience of having the Internet in the palm of your hand.

Recommendations for guarding against growing mobile malware threats for enterprises, government agencies and SMBs:

--  Employ on-device anti-malware to protect against malicious applications, spyware, infected SD cards and malware-based attacks against the mobile device
--  Use SSL VPN clients to effortlessly protect data in transit and ensure appropriate network authentication and access rights
--  Centralize locate and remote lock, wipe, backup and restore facilities for lost and stolen devices
--  Strongly enforce security policies, such as mandating the use of strong PINs/Passcodes
--  Leverage tools to help monitor device activity for data leakage and inappropriate use
--  Centralize mobile device administration to enforce and report on security policies
       
About the report: "Malicious Mobile Threats Report 2010/2011" was compiled by the Juniper Networks Global Threat Center (GTC) research facility, which conducts around-the-clock security, vulnerability and malware research tailored specifically to mobile device platforms and technologies. The GTC examines increasingly sophisticated attacks from 2010 and 2011, such as, Myournet/Droid Dream, Tap Snake and Geinimi as well as the pirating of the "Walk and Text" application, new threat vectors for mobile cybercrime, and the potential for exploitation and misuse of mobile devices and data.

Contact: http://www.juniper.net

Monday, April 11, 2011

SaaS Revenue To Grow Significantly Through 2015

Worldwide SaaS revenue will grow dramatically over the next few years, with a compound annual growth rate (CAGR) of 23 percent from 2010 to 2015, according to a market report. In addition, the overall managed security services market, including CPE, SaaS, and cloud services, will reach just under $17 billion by 2015.

Other key findings:

--  Together, SaaS and cloud-based security services are expected to make up close to half of the overall managed security services market opportunity by 2015

--  While managed security services are popular in North America and EMEA, there is opportunity around the globe, as cloud-based services, and SaaS in particular, are location independent  

--  Asia Pacific and Central and Latin America (CALA) are expected to account for a growing portion of the managed security services market in coming years

Comment from Jeff Wilson, principal analyst for security at Infonetics Research: 2010 was a good year for managed security services, which, for the most part, met our expectations for buyer uptake and provider innovations. Revenue grew 12 percent in 2010 and will grow 62 percent over the next 5 years, driven by cloud-based services and SaaS. There was no decrease in fundamental demand for managed security in 2010, just a sluggish global economy.

About the report: The Infonetics Research report Managed Security Services and SaaS with Service Provider Scorecards report analyzes and forecasts the market for SaaS, CPE-, and cloud-based security services managed by service providers for small, medium, and large businesses, including managed firewalls, content security, intrusion detection and prevention solutions (IDS/IPS), and other security services.

Contact: http://www.infonetics.com

Security Spending For Virtualized Environments To Spike

Many companies are moving to a virtualized server infrastructure to take advantage of the overabundance of computing resources in their networks, save energy and cost, and make their IT infrastructure more robust, but they are starting to realize that this may all come at the expense of security, according to a survey.

Key findings:

--  The virtual server security market is new and fragmented, marked by a mix of vendors, including virtualization vendors, application and database vendors, server and data center heavy hitters, client security players, and network security vendors

--  The top three drivers for deploying new security solutions for virtualized environments are preventing new threats specific to virtual environments, preventing inter-virtual machine (inter-VM) threats, and maintaining secure server configurations

--  The confluence of media hype, maturing product offerings, and strong buyer interest will make 2011 the year brand leadership and mindshare are established in the virtualized infrastructure security market, followed by a breakout spending year in 2012

--  Respondent companies expect to spend an average of 51 percent more on security for virtualized environments in 2012 than they did in 2010

Comment from Jeff Wilson, principal analyst for security at Infonetics Research: While the market leader in the data center/cloud security space is at this point undecided, at the center of the leadership puzzle is the emerging segment of security solutions for virtualized environments. Microsoft, Cisco, and VMware lead in brand awareness and strength overall now, but this is only one (admittedly early) piece of the virtualization/data center security leadership puzzle. It's possible that when it comes down to who will actually be able to best monetize security solutions for virtualized environments, players with much lower brand presence will do better than some of the players with stronger overall brands, if they deliver a better product.

About the survey: Market research firm Infonetics Research polled end-user companies that have deployed server virtualization about their buying plans for security.The survey, Security for Virtualized Infrastructure: North American Enterprise Survey, is a 20-page report of buyer plans, deployment drivers, budgets, strategies, and ratings of vendors in the space. The survey includes respondent ratings of Check Point, Cisco, Juniper/Altor, Microsoft, Reflex, and VMware on 8 criteria: security, technology, product roadmap, management, price-to-performance ratio (value), pricing, financial stability, and service and support. Vendors named by respondents in open-ended questions or rated when prompted include Check Point, Cisco, Citrix, Crossbeam, F5 Networks, HP, IBM, Juniper/Altor, McAfee, Microsoft, Oracle, Reflex, Symantec, and VMware.

Contact: http://www.infonetics.com

Sunday, March 27, 2011

Expansion, Virtualization, Cloud Services Drive Data Center Markets

North American enterprises plan to increase their data center infrastructure spending by an average of 25 percent in 2011, according to a survey. Cloud technologies will play a major role in this expansion and are among the top three expected data centers changes.

The survey also found that interest in 100 Gigabit Ethernet (GE) equals or exceeds interest in 40GE, despite the lack of available products.

Fiber Channel is the most used SAN technology, but respondents show strong interest in next generation FCoE (Fiber Channel over Ethernet) to streamline their data center networks

Comment from Matthias Machowinski, Infonetics Research's directing analyst for enterprise networks and video: 2010 was a strong year for data center network equipment sales, due to a rebound from bare-bones 2009 spending levels and, more importantly, fundamental trends favoring investments in the data center, such as the explosion of content and traffic, use of virtualization, and increasingly, cloud-based services and architectures. For 2011, we expect tempering but still robust growth in sales, and the biggest opportunities for vendors is in helping companies grow their data center infrastructure sustainably, such as through the use of products that dramatically increase price-to-performance or improve management in highly virtualized environments.

About the survey: For its Data Center Deployment Strategies survey, published in February 2011, Infonetics asked data center purchase decision-makers at 115 North American companies with 100 or more employees about their data center plans over the next 2 years. Survey respondents were asked to rate drivers for data center investments, technologies, applications, equipment and software, as well as their use of, plans for, and preferred features for data center technologies, including security, virtualization, storage, cloud-based services, servers, Ethernet switches, and more. The report includes responses to 2 open-ended questions about use and plans for cloud-based services and the top 3 major changes they plan to make to their data centers.

Contact: http://www.infonetics.com/login