Cyber criminals will go after VoIP, RFID, mobile phones
McAfee Inc. announced the release of its second issue of Sage, a semi-annual security journal designed to inform executives and technical personnel on cutting-edge security topics.
The journal includes articles from McAfee researchers, managers and evangelists, on topics including cybercrime, Microsoft Windows Vista security, spyware, spam, cell phone security, data leakage and security risk management.
McAfee officials called the constant struggle between security personnel and malware authors an arms race. With that in mind, the Sage journal is designed to help security experts stay ahead of the ever-shifting threat landscape, offering views of what they should watch for and beware of as they plan for the future.
Sage examines the near-term future of the security business — the threats, defenses and issues security professionals will face over the next five years. Among the findings in the report:
* The Future of Cybercrime: Cybercrime follows money. The majority of cyber criminals target PC users, but experts expect more attackers to branch out to other areas of technology, like Voice over Internet Protocol (VoIP) and radio frequency identifications (RFID), as those technologies become more widely adopted.
* Securing Applications: Securing applications is a continual race between malware writers and developers, and the developers are struggling to keep up. As more information surfaces about the nature of software bugs and how they might be exploited, hackers are finding vulnerabilities that were previously considered to be secure.
* The Future of Security, Vista Edition: While Microsoft has taken steps to make the base of Windows Vista more secure, the improvements weaken third-party efforts to secure systems and don’t go far enough to do the job alone.
“For the most part this issue has been resolved,” explained David Marcus, security research and communications manager, for Santa Clara, Calif.-based McAfee Avert Labs. “But there is still a huge misconception in the public and in the enterprise that Vista is all about security and that it is locked down but that is simply not the case.
“Some malware is written to target the security technologies on a PC and shut them down. We will see, probably later this year, malware doing that to Vista.”
* Spyware Grows Up: Although programmers add security measures during development, new spyware technology often surpasses even the best planning of the most diligent engineers. Spyware will follow us into new technologies, like Bluetooth and RFID.
* Emails Spam Plague Persists: Expect little increase in the percentage of spam volume over the next two years. That said, the total volume of spam is expected to increase as worldwide bandwidth grows. Image spam is the latest way for spam writers to dodge defenses.
* Online Crime Migrates to Mobile Phones: While current mobile phone service is generally considered safe, McAfee is seeing a rapid growth in mobile attacks with increasingly technical diversification.
“Malware and cyber criminals follow money,” Marcus said. “Though we’re not seeing mobile malware emerge to a large extent yet [in North America], we are seeing it in Europe and Japan where culturally they use their mobile phones differently (for instance, for making online banking transactions or point-of-sale purchases).
“Give it another year or so and we should see it become more commonplace here. But we’re ahead of the curve; McAfee has invested heavily in mobile agent technologies. For example, we’ve been offering a mobile version of our anti-virus solution overseas for quite awhile now.”
* Closing the Data Leakage Tap: Data Leakage is an emerging security concern that could bear an enormous impact on the reputation of a business. While drive encryption is the only reasonably mature preventative technology, McAfee said basic data leakage prevention and disk encryption will become ubiquitous in regulated enterprises within the next five years.
* Managing Risk: Security risk management is an important issue for IT managers. Organizations that fail to be proactive in risk management will find that the businesses they are chartered with protecting will sail on without them.
Source:eChannel Line
