Security Intelligence and Risk Management

The HP 2012 Cyber Risk Report is an annual collaboration among groups within HP Enterprise Security Products that gives organizations a view into the threat landscape that can help them determine how to best deploy their limited resources to reduce their security risk.

Key findings include:

• Web applications remain a popular and viable attack vector, due in no small measure to a lack of both organizations and developers to correct longstanding vulnerabilities.
• Old and new technologies alike introduce new security vulnerabilities. Both mobile application vulnerabilities and SCADA vulnerabilities have seen dramatic increases over the past five years.
• Even though the amount of critical vulnerabilities as a percentage of total vulnerability disclosures has dropped, this has not served to make enterprises safer, but in fact harder to secure.