SA cyber threat barometer released
SECURITY| Sept. 28, 2012, 9:11 p.m.
With over R2.6bn stolen in cybercrimes in SA in the past 18 months, a new report maps out the biggest cyber threats in the country.
The 2012/13 South African Cyber Threat Barometer was released by IT security firm Wolfpack Information Risk in Johannesburg today. Wolfpack Managing Director Craig Rosewarne said the report was the result of extensive research into the cyber threat landscape in South Africa.
“The report is intended to provide ongoing insight to support the Cabinet’s recently-approved National Cyber Security Policy Framework,” he said, and was researched and compiled with the support of the British High Commission.
Rosewarne said while the true cost of cyber crime was difficult to assess, conservative estimates showed that over R2.6 billion rand had been stolen in cyber crimes in the country in the past 18 months. With a recovery rate of up to 75%, much of the stolen money had been recovered, but the impact and additional costs of cyber crime were far greater than this, he noted. Relatively few cyber crimes are reported and successfully prosecuted in SA, Rosewarne said.
The report warned that the African continent as a whole is particularly vulnerable to cyber security threats. With cheaper and faster internet, more Africans will be ‘always on’ or continually connected, increasing the number of ‘new’ internet users who are not security-savvy, it said.
Rosewarne noted that cyber crime threatens everyone, and called on the public and private sector to work together to combat it. He said key issues identified in the research included poor threat management, with inadequate maintenance and management of audit logs; the lack of a national Computer Security Incident Response Team (CIRT) in SA and a lack of deep technical skills. He added that archaic processes and a lack of information security skills in law enforcement agencies made reporting and prosecution in cyber crimes difficult.
Collaboration between the public and private sector, specialised training and the establishment of a CIRT were among the recommendations made to combat the threats.
Stakeholders in key sectors were polled on what they saw as the greatest potential threats to their industries. The threat of denial of service (DoS) attacks and the unavailability of ICT were cited as the highest potential cyber threats against government and financial sectors and were ranked high in the telecoms sector.
Intrusions and economic fraud were ranked as the second-greatest cyber threats in SA.
On the question of what are seen as the services most likely to be targeted by cyber criminals in SA, respondents said internet banking, e-commerce web sites and social and entertainment web sites were likely targets. Respondents in government felt that critical information infrastructure was also at risk.
MORE SECURITY NEWS
ATM/card-related frauds rise 11.95%Fraud cases perpetrated through the use of automated teller machine (ATM) and other card payment system has risen 11.95% over last year’s cases, according to the Nigeria Deposit Insurance Corporation (NDIC) annual report. Read More
Identity thieves target used hard drivesCompanies need to take measures to wipe the hard drives of obsolete technology before selling or donating it, warns Xperien. Read More
Cybercrime in South Africa: The battlefield has shiftedAlthough the majority of South African businesses are investing in their security infrastructure, many are doing so in the wrong places. Read More
RSA acknowledged by Frost & Sullivan for excellence and innovation in its network security forensicsRSA, The Security Division of EMC, has been determined by Frost & Sullivan as winner of the 2016 Global Frost & Sullivan Enabling Technology Leadership Award in Network Forensics for RSA Security Analytics. Read More
Top targets for cyber attacks in East AfricaGovernments are East Africa’s top target sector for cyber attacks, followed by telecoms and financial services, says a report by Control Risks. Read More
Connecting the dots: respond-to-alerts based security posture will not protectAccording to an Arbor paper, “Connecting the Dots in Enterprise Security”, advanced threats target a specific company, are designed to bypass traditional controls, and comprise a planned and orchestrated set of attack activities. Read More
DNS attacks on the increase, concern for SA firmsSouth African organisations will likely see an increase in the volume and severity of network attacks over the coming years, says Arbor Networks. Read More
RSA: 75 percent of organisations at significant risk of cyber incidentsRSA, The Security Division of EMC, has released data demonstrating that organisations that invest in detection and response technologies, rather than perimeter-based solutions, are better poised to defend against cyber incidents. Read More
DDoS attacks don’t have to mean ‘game over’The problem of inadequate protection from DDoS attacks is a growing concern for South African organisations, says Arbor Networks. Read More
DNS attacks on the increase, concern for SA firmsArbor Networks Annual Worldwide Infrastructure Security Report provides a rare insight into the nature of today’s network security threats, and the ways in which enterprise network operators and service providers are facing up to these challenges. Read More
FEATURED STORYGovernment should encourage youths in ICT early
Youths should be given more encouragement to develop their ICT skills, an 11-year-old app developer told Kokumo Goodie.
BEST READ NEWS
IN DEPTHIBM Opens First Cloud Data Centre in South Africa
IBM is opening a new IBM Cloud Data Centre in Johannesburg, South Africa. The new cloud center is the result of a close collaboration with Gijima and Vodacom and is designed to support cloud adoption and customer demand across the continent.
COMPANY NEWSTigo, JI and GES equip teachers on child online protection initiative
Tigo, in partnership with J Initiative (JI), a youth focused non-governmental organisation in Ghana, have committed to protecting children online through policy advocacy, awareness creation, public education ...Ericsson and King’s College London demonstrate 5G tactile robotic surgery
Ericsson and King’s College London will be demonstrating a 5G use case of tactile robotic surgery at 5G World 2016 in London on 29-30 June.