How many security incidents are related to operator error?

Many security observers blame poor the poor usability of security products and software for a large percentage of security incidents. When a network administrator doesn’t configure a firewall properly, for example, it can leave gaps in network defenses an attacker can exploit; when a vendor ships a product that isn’t out-of-the-box secure, or which is difficult to keep secure because of its design, it often leaves companies under-secured.

The problem is especially acute with wireless LANs (WLANs). In fact, Gartner Group says until 2006, 70 percent of successful WLAN attacks will be due to incorrectly configured WLAN access points and PC software.

By Mathew Schwartz at Enterprise Systems.

[ Read more ]