Wednesday, June 17, 2015
Database breach is easier: According to the data that security firm Indusface had collected from more than 2.9 million scans and 4.5 billion ethical hacks, their experts are certain that it’s easier for hackers to infiltrate into the databases.There are two reasons for it, Indusface said. Firstly, SQLi vulnerability was found on more than 90 percent of the application, which provides direct access to a database where attackers can read and edit files. Secondly, system administrators rarely know about it. Given that most-medium sized organisations in our country are unable to detect SLQ Injection attacks, there are chances that many of them are bleeding sensitive data without knowledge.
Cross-site scripting is abundant: Although XSS is not really one of the most pressing issues for most companies, it is as common as SQLi. Approximately 97 percent of the tested websites had XSS and chances are that they did not really consider it as a severe issue. However, XSS can cause real problems for businesses by not only putting their servers at risk but also users.
Most organisations are not testing their applications: According to the Indusface research team, 7 out of 10 websites are hacked at the application layer, but overemphasis on network security and lack of awareness of application security has made many companies overlook the risks entirely. Most of them do not even know about OWASP Top 10 vulnerabilities, and don’t know how they can be used to breach into the system.
Application patching is procrastinated: If it isn’t broken, why fix it? Probably one of the primary reasons why most companies overlook application layer vulnerabilities is that these are difficult to fix. E-commerce and other competitive industries have to frequently make changes, where customer experience is their top priority. On the other hand, banking, insurance, and other finance companies aren’t too keen to change things as it involves complete planning and auditing.
“Application security is a very niche branch of information security. It requires specific understanding of how Layer 7 interacts over the World Wide Web and also other communication layers within the organisation network,” Venkatesh Sundar, CTO, Indusface.
Here are some of the key India-centric facts:
Read more: Click here
"Indusface has proved to be a valuable security partner with its Total Application Security solution. Their 'detect-protect-monitor' package handles security worries so we can focus on improving services for our customers. Vulnerability detection, attack blocking and near real-time reports are some of the key differentiators that we enjoy with them. The web application scanning and web protection combination ..."
"As one of the leading banks in India, securing application infrastructure is critical for us. Indusface’s Total Application Security package allows us to scan vulnerabilities continuously and prevent attacks. Indusface also provides the unique benefits of expert handling and tuning on custom rules with round-the-clock traffic monitoring and protection through on-premise appliances ..."
"Our complete ecommerce infrastructure is hosted on the cloud and we are glad to have Indusface as partner for web security. Due to their association with cloud service providers and prompt deployment options, Indusface was the preferred security choice. The on-demand and scheduled scanning helps us keep track of vulnerabilities that may otherwise damage our website or put customers at risk ..."