+ All Categories
Home > Technology > Nine Classification Patterns from the Verizon 2014 Data Breach Investigations Report

Nine Classification Patterns from the Verizon 2014 Data Breach Investigations Report

Date post: 05-Dec-2014
Category:
Upload: verizon-enterprise-solutions
View: 3,489 times
Download: 1 times
Share this document with a friend
Description:
Explore stats and facts from recent incidents, and see how the nine classifications of attacks affect major industries. Download the full report here: http://vz.to/DBIR2014
1
Hotel BANK BANK Energy/Utilities Just two patterns—web app attacks and crimeware—covered 69% of all incidents. Public Sector The most frequent incidents were errors (34%), insider misuse (24%), crimeware (21%) and lost/stolen assets (19%). Healthcare Physical theft and loss of assets occurred most often in the office—not from personal vehicles or homes. Travel/Hospitality Three-quarters of the attacks targeted POS devices and systems—a good argument for PCI compliance. R ET AIL of all security incidents we analyzed over a ten-year period fit into nine basic patterns. 92% Web app attacks were responsible for the highest number of incidents. 38% DOS attacks were most frequent, followed by point-of-sale intrusions (31%). 33% Most attacks came from point-of-sale intrusions—highest for all industries. 75% Combined number of attacks from cyber-espionage and DOS. 54% Number of incidents attributed to DOS attacks. 37% Just four patterns accounted for almost all attacks. 98% of security incidents were the result of lost or stolen assets. 46% FIN A N CIA L S E R VIC E S M A N U F A C T U R I N G P R O F E S SI O N A L S E R V I C E S E N E R G Y A N D U TILITIES P U B L I C S E C T O R H E A L T H C A R E T R A V EL A N D H O SPIT A LITY The majority of incidents came from web app attacks, DOS, and card skimming. 75% Data Breach Investigations Report 2014 Conducted by Verizon with contributions from 50 organizations from around the world. Everything Else Point-of-Sale Intrusions Cyber-Espionage Web Application Attacks Insider Misuse Crimeware Miscellaneous Errors Card Skimmers Physical Theft/Loss Denial of Service Attacks © 2014 Verizon. All Rights Reserved. The Verizon name and logo and all other names, logos, and slogans identifying Verizon’s products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners. MC15923 04/14 Nine classification patterns covered the majority of security incidents. In 2013, we analyzed over 63,000 security incidents and more than 1,300 confirmed breaches to provide new insight into your biggest threats and to help improve your defenses against them. This year’s report identifies nine basic patterns that covered 92% of all the 100,000 security incidents we’ve looked at from the past 10 years. Download the Verizon 2014 Data Breach Investigations Report today. verizonenterprise.com/DBIR/2014 verizonenterprise.com/DBIR/2014
Transcript
Page 1: Nine Classification Patterns from the Verizon 2014 Data Breach Investigations Report

Hotel

BANKBANK

Energy/Utilities Just two patterns—web app attacks and crimeware—covered 69% of all incidents.

Public Sector The most frequent incidents were errors (34%), insider misuse (24%), crimeware (21%) and lost/stolen assets (19%).

HealthcarePhysical theft and loss of assets occurred most often in the office—not from personal vehicles or homes.

Travel/HospitalityThree-quarters of the attacks targeted POS devices and systems—a good argument for PCI compliance.

RETAIL

of all security incidents we analyzed over a

ten-year period fit into nine basic patterns.

92%

Web app attacks were responsible for the highest number of incidents.

38%

DOS attacks were most frequent, followed by point-of-sale intrusions (31%).

33%Most attacks came from point-of-sale intrusions—highest for all industries.

75%

Combined number of attacks from cyber-espionage and DOS.

54%

Number of incidents attributed to DOS attacks.

37%

Just four patterns accounted for almost all attacks.

98%

of security incidents were the result of lost or stolen assets.

46%

FINANCIAL SERVICES

MANUFACTURIN

G

PROFESSI

ONAL

SER

VIC

ES

ENERGY AND UTILITIES

PUBL

IC S

ECTO

R

HEALTHCARE

TRAVEL AND HOSPITALITY

The majority of incidents came from web app attacks, DOS, and card skimming.

75%

Data Breach Investigations Report 2014Conducted by Verizon with contributions from 50 organizations from around the world.

Everything Else

Point-of-Sale Intrusions

Cyber-Espionage

Web Application Attacks

Insider Misuse

Crimeware

Miscellaneous Errors

Card Skimmers

Physical Theft/Loss

Denial of Service Attacks

© 2014 Verizon. All Rights Reserved. The Verizon name and logo and all other names, logos, and slogans identifying Verizon’s products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners. MC15923 04/14

Nine classification patterns covered the majority of security incidents.

In 2013, we analyzed over 63,000 security incidents and more than 1,300 confirmed breaches to provide new insight into your biggest threats and to help improve your defenses against them. This year’s report identifies nine basic patterns that covered 92% of all the 100,000 security incidents we’ve looked at from the past 10 years.

Download the Verizon 2014 Data Breach Investigations Report today. verizonenterprise.com/DBIR/2014verizonenterprise.com/DBIR/2014

Recommended