Hacking is Not that Hard
▫ More than 90% of successful breaches required only the most basic techniques.
▫ Only 3% of breaches were unavoidable without difficult or expensive actions.
▫ Outsiders with insiders help of or with gross negligence of insiders were responsible for most breaches.
▫ 85% of breaches took months to be discovered; the average time is five months.
▫ 96% of successful breaches could have been avoided if the victim had put in place simple or intermediate controls.
▫75% of attacks use publicly known vulnerabilities in commercial software that could be prevented by regular patching.
▫ One study found that antivirus software missed as much of 95% of malware in the first few days after its introduction.
▫ Another study found that 25% of malware is not detected by current techniques.