Police: Pen tests could thwart 90 percent of breaches

Powered by SC Magazine
 

But more resources needed.

Some 90 percent of data breaches investigated by the NSW Police's fraud squad could have been avoided if organisations conducted penetration tests, according to a senior official at the cybercrime fighting unit.

Detective superintendent Bruce van der Graaf said the tests would detect holes in IT systems that were responsible for almost all theft of corporate databases.

"I don't know why more people don't do it," he said. "It could be too expensive, but consider the the pain of recovery after your business is breached."

Penetration tests help organisations identify holes in information security systems that could allow data to be stolen and then sold on web forums.

Bruce van der Graff will give a detailed account on efforts to curb online fraud at SC Magazine's 'Security on the Move' conference in Sydney next month. Click here to register.

Van der Graaf said penetration testing was just one of many areas in IT security that needed some attention to drive down the frequency of online fraud.

More police and resources were also needed, he said.

Database theft is on the increase, van der Graaf noted. He said he has seen a big shift in electronic crime who since joining the fraud unit in 1988.

"This year has been a challenge, a big learning curve," van der Graaf said. "We are [starting to] appreciate the scale and sophistication of the crimes."

He said fraud was more public back in the '80s and early '90s, and has since become more hidden and dangerous.

Copyright © SC Magazine, Australia


Police: Pen tests could thwart 90 percent of breaches
 
 
 
Top Stories
 
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  4%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  3%
 
A Federal Government agency (ATO, Centrelink etc)
  19%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1899

Vote
Do you support the abolition of the Office of the Information Commissioner?