Poll cites converged-IP security concern

As viruses and malicious software bloom, senior executives across a range of industries see security as their top concern in implementing converged IP networks, according to a joint study released by the Economist Intelligence Unit and AT&T.

It's the second year in a row that the survey, which polled 236 executives in 50 countries, put security ahead of cost, their second greatest concern, said Denis McCauley, director of global technology research for the EIU. Security was ranked first at 26%, followed by implementation costs at 23% and the cost of new equipment at 19%, the study said.

Nonetheless, 62% of the respondents expect to implement IP networks in the next three years, although 63% felt that processing consumer data online put them at risk of security breaches.

To continue reading, register here and become an Insider. You'll get free access to premium content from CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider content or sign in.

As viruses and malicious software bloom, senior executives across a range of industries see security as their top concern in implementing converged IP networks, according to a joint study released by the Economist Intelligence Unit and AT&T.

It's the second year in a row that the survey, which polled 236 executives in 50 countries, put security ahead of cost, their second greatest concern, said Denis McCauley, director of global technology research for the EIU. Security was ranked first at 26%, followed by implementation costs at 23% and the cost of new equipment at 19%, the study said.

Nonetheless, 62% of the respondents expect to implement IP networks in the next three years, although 63% felt that processing consumer data online put them at risk of security breaches.

McCauley said the study's results were not surprising so much as noteworthy in the respect that the greatest advantages of converged IP networks - openness across the enterprise to customer and company data - are also its greatest vulnerability. Companies are also using more mobile devices, creating more possible entry points into networks, he said.

Executives, however, believe the biggest threat comes from people. The study showed that executives think most attacks come from inside their company as part of internal sabotage, spying by employees or simply unintentional mistakes.

Other threats such as phishing attacks - which mimic familiar commerce sites through e-mails to gain user names and passwords - are expected to increasingly target commercial organizations, the study said. In "spear" phishing, employees are sent an e-mail by someone masquerading as a higher-level executive asking for personal information.

It's likely the subordinates will respond quickly, the study said. "The threats are evolving," McCauley said.

Increasingly sophisticated denial-of-service attacks are also being directed against financial institutions, said Kees Vos, global offering manager for AT&T. The attacks are not by average kids but by professionals trying to make money, he said.

AT&T, which handles between 18% to 20% of all Internet traffic, collects data in an effort to try to predict emerging security threats, Vos said. It helps in preparing a remedy since the time when a threat emerges and starts doing damage is decreasing, he said.

"To wait for it to happen and react, it's always too late," Vos said.

The IDG News Service is a Network World affiliate.