Discussion in 'polls' started by Triple Helix, Jul 29, 2010.
Who is more at risk for Zero Day Attacks?
Corporations. The majority of criminals are out for money, and where better to get it than big companies who have a tendency to overlook everything else but their bottom line.
I would say average users getting hit with rogue AV's as corporations having been hit big time in the past employ highly skilled security experts these days.
None of those security experts are as knowledgable as the folks at Wilders though!
We are indeed a wary bunch!
Even the Rogue's don't affect us unless we want to
We have big sticks that's why!
I voted "all of the above".
I'm thinking Zero Day Attacks are equal-opportunity exploiters...
with plenty to go around for everyone.
Security Knowledgeable Users
All of the Above, because even SKU's "could" have been hit with the recent .lnk exploit.
Plus we don't know "what" ZD's there might be on the horizon, and how these "may" work. We'll only know when we know, or maybe after the event/s, possibly.
You can guarantee the baddies won't give up trying to penetrate W7 etc and whatever else MS comes up with, or other OS's like MAC's etc. Too much to gain, and lose.
Of course generally speaking most of us are pretty well sorted, but there's always a chink in the armour somewhere.
I think average user because they surf the web without precaution.
Most of the time they even lack a good security setup and the most important thing "Common Sense"
Considering the Zero day attacks only those who don't have common sense are at risk
LOL.. What if a Zero day attack is like Stuxnet?
Yeah have heard much of that but I guess this variant affects normally the business envt(SCADA systems)
Even other variants like Chymine, Vobfus, Sality and Zeus are also attempting to exploit Microsoft's LNK vulnerability...
I nominated governments...
on the basis of "Clowns to the left of me, jokers to the right" from the song "Stuck In The Middle With You" by Gerry Rafferty and Joe Egan
And i nominated Corporations ...
Average users lack the Security Resources of Gov. and Corp.
I'd vote for "Schools" if it is in the poll.
I voted for corporations, but home users are just as vulnerable.
Edit: To explain myself, corporations are most likely better protected than the average home user, but an infection can spread much faster in a business environment where most computers are connected to each other.
IMO, home users are more likely to get hit by 0-day malware or exploits because there are more of them out there and security/restrictions are weaker. Also they're "browsing" more and downloading and running more things from unknown/untrusted websites (whereas at work, people are scared of downloading things and go more on trusted/popular work-related websites).
Corporations can have far more to loose and have more damage incurred in the case of 0-day attacks though, particularly as they are more likely to be targeted attacks and don't sit around ITW for long before they do attack.
So, my vote goes for corporations.
For me Governments. Average users find WU enabled when they begin to use their pc
All of the options , in my opinion.
But governments and corporations have a habit of not fully USING said resources. Do you have any idea of the lack of oversight there is in major corporations, let alone government agencies? These businesses are the ones complaining enough to keep XP from dying right now. They lack oversight, a lot of them lack money, and those that don't lack the money are more concerned about their profit than they are spending a small fortune securing all of their systems properly. The bad guys LOVE the fact that your average home idiot keeps financial records, passwords, family information on their computers, and they adore teenagers sharing their life all over the social websites.
BUT, the real treasure troves lie in the banks, hospitals, local government offices, who have maybe one or two "IT" people that spend more time fixing "Bertha's" mistakes when she pushes the wrong button on a computer while talking to her best friend on her cell phone, than actually looking after the integrity of company security, what little there may be in the first place. You guys have to stop picturing the NSA and Google's of the world when this subject comes up and start thinking about the hundreds of thousands if not millions of small town/ mid-sized city banks, credit card processing centers, stores, and even government offices like your local Social Security centers.
These places carry just as valuable if not more valuable information, and, with little funds, oversight, or people, are ripe for the picking.
I would say average users.
But a strong argument could be made for governments and corporations.
All of the above. Prime example the current .lnk debacle.
Separate names with a comma.