RSS Alerts

Related Links

Related Stories

  • Search for security
    With more than 30 000 web pages being infected every day, search engine results could increasingly lead to malware infection. Kari Larsen asks what the search engines are doing to mitigate security threats, and how users can protect themselves.
  • Number of malicious websites up 233% in H1 2009
    The Websense Security Labs report on the state of internet security for the first half of 2009, has found that the number of malicious websites has increased 233% over the last six months, and 671% over the last year.
  • Social networking - a risk to information security?
    As the popularity of social networking sites continues to mount, it becomes increasingly important to consider the information security risks posed in the context of a wider data loss prevention and reputation management strategy. Cath Everett reports
  • Web 2.0 is top security threat to businesses in 2010
    Research just released claims to show that web 2.0 technology – and in particular, social networking sites – poses the top risk to small-to-mid-sized businesses in the year ahead.
  • HMRC phishing attacks offer cash rebate as lure
    Yesterday was the last day in which UK taxpayers could file their 2008/2009 tax returns online – without getting fined for being late – and HMRC reports that tens of thousands of fraudulent phishing emails were sent out last week.

News

UK IT managers unaware of Web 2.0 security threats

10 June 2009

As part of its Web2.0@Work™ global research project, security specialist Websense Security Labs has found that many organisations in the UK are ill equipped to protect themselves from Web 2.0 threats.

Only 12% of IT managers in the UK believe that the 100 most popular Web 2.0 sites hold the most security threats, whereas according to research from Websense Security Labs, 70% of the 100 most popular sites have hosted or directed users to malicious code, phishing or fraud.

Over a third of the surveyed by Websense said employees have tried to bypass information security policies to access Web 2.0 websites. Although 82% said they had confidence in the organisation’s Web 2.0 security, only 43% reporting they have the tools in place to prevent confidential company data from being uploaded on the web.

Perhaps most shocking, nine percent of IT managers are not sure about their own IT security policies, Websense said.

This is worrying as 57% of the interviewed IT managers believe that Web 2.0 is necessary to their business, and 70% allow access to web-based email services. Three quarters said they feel pressured to allow more access to Web 2.0 sites.

Mark Murtagh, technical director at Websense, said: “As more employees access Web 2.0 tools and applications to enhance their productivity at work, IT departments are currently facing a dilemma. They don’t want to restrict access to these tools yet they are finding it difficult to establish the appropriate Web 2.0 usage policies and offer guidance to their staff.

“To that end, Websense has introduced best practice guidelines to help IT professionals safely harness the power of Web 2.0 within their organisations.”

Websense has made use of Web 2.0 itself, Infosecurity notes, in order to raise awareness by creating a Web2.0@Work – Powered by Websense page on Facebook.

 

This article is featured in:
Application Security • Internet and Network Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.

Copyright © 2010
Elsevier Ltd. All rights reserved.
Terms & Conditions | Privacy | Website Design Working with water