Announcement

Collapse
No announcement yet.

May 2003 corp/gov't security breaches: Windows: 3,801 Linux: 19,208

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • May 2003 corp/gov't security breaches: Windows: 3,801 Linux: 19,208

    Draw your own conclusions.
    ITProToday.com is a leading online source of news, analysis and how-to's about the information technology industry.


    Linux Not as Secure as Windows Server
    Curiously, this news will come as a surprise to some people, but according to a report from the security experts at mi2g, open-source poster child Linux is losing the security fight--big time--to Windows Server. Yes, you read that right: In May 2003 alone, Linux-based corporate and government systems experienced 19,208 successful breaches worldwide, whereas similarly oriented Microsoft Windows Server systems suffered only 3801 breaches. During this time period, more than 75 percent of all server-based breaches occurred on Linux systems; Windows systems were responsible for just 15 percent of breaches. Furthermore, the reports says that Windows-based systems were far more resilient than Linux-based systems during the Iraq war months from March to May 2003, a time of increased hacking activity. mi2g, which has been tracking server attacks since 1995, now oversees a database that contains more than 220,000 individual attacks and more than 7000 hacker groups. So why are Linux servers more easily compromised? The security experts quote several primary reasons: First, most Linux servers are improperly configured and don't come with decent default security configurations. Second, the open-source community doesn't have a coherent "trustworthy computing" initiative. Third, Linux is a target because of its increasing popularity in the server world. And, fourth, Frank Stallone. In other words, everything I've been saying about Windows, Linux, and security not only is true but is evolving in a wonderfully predictable way. Shouldn't we stop all the bogus "Windows isn't secure" baloney when a far less secure competitor is just waiting to be compromised?
    "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
    Ben Kenobi: "That means I'm doing something right. "

  • #2
    Re: May 2003 corp/gov't security breaches: Windows: 3,801 Linux: 19,208

    While it's probably true....You really should find a less-biased source
    Eventis is the only refuge of the spammer. Join us now.
    Long live teh paranoia smiley!

    Comment


    • #3
      Hackers have better taste in targets.

      How many Linux servers vs Windows servers are there?
      And what about Unix and other flavors of servers?

      (Just to place it in some context)
      "I read a book twice as fast as anybody else. First, I read the beginning, and then I read the ending, and then I start in the middle and read toward whatever end I like best." - Gracie Allen

      Comment


      • #4
        mi2g software works with financial services groups, both large and small, to change and eEnable their entire business.


        for the source from...the source.
        "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
        Ben Kenobi: "That means I'm doing something right. "

        Comment


        • #5
          Okay.

          First question - what is the source of said statistics?
          (\__/) 07/07/1937 - Never forget
          (='.'=) "Claims demand evidence; extraordinary claims demand extraordinary evidence." -- Carl Sagan
          (")_(") "Starting the fire from within."

          Comment


          • #6
            Originally posted by Edan
            Hackers have better taste in targets.

            How many Linux servers vs Windows servers are there?
            And what about Unix and other flavors of servers?

            (Just to place it in some context)


            Windows Server: 49%
            Linux: 25.7%

            Although other sources say differently:
            "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
            Ben Kenobi: "That means I'm doing something right. "

            Comment


            • #7
              And, of course, there's also this interesting bit from CERT: all current issues are Windows-related.
              (\__/) 07/07/1937 - Never forget
              (='.'=) "Claims demand evidence; extraordinary claims demand extraordinary evidence." -- Carl Sagan
              (")_(") "Starting the fire from within."

              Comment


              • #8
                Nice attempt at a countertroll, but more glaring is how you're trying to sidestep the issue that, in reality, although Windows servers vastly outnumber Linux ones, Linux security breaches vastly outnumber Windows.
                "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
                Ben Kenobi: "That means I'm doing something right. "

                Comment


                • #9
                  According to a new Aberdeen Group report, open-source solution Linux has surpassed Windows as the most vulnerable OS, contrary to the high-profile press Microsoft's security woes receive. Furthermore, the Aberdeen Group reports that more than 50 percent of all security advisories that CERT issued in the first 10 months of 2002 were for Linux and other open-source software solutions. The report muddles the argument that proprietary software such as Windows is inherently less secure than open solutions. And here's another blow to the status quo: Proprietary UNIX solutions were responsible for just as many security advisories as Linux in the same time period. Could Windows be the most secure mainstream OS available today?

                  "Open-source software, commonly used in many versions of Linux, UNIX, and network routing equipment, is now the major source of elevated security vulnerabilities for IT buyers," the report reads. "Security advisories for open-source and Linux software accounted for 16 out of the 29 security advisories--about one of every two advisories--published for the first 10 months of 2002. During this same time, vulnerabilities affecting Microsoft products numbered seven, or about one in four of all advisories."

                  The stunning report makes several claims that seem to fly in the face of widely accepted beliefs. First, the Aberdeen Group says that Windows-based Trojan horse attacks peaked in 2001, when CERT released six such advisories, then bottomed out this year, when CERT didn't issue any alerts. However, Trojan horse-based attacks on Linux, UNIX, and open-source projects jumped from one in 2001 to two in 2002. The Aberdeen Group says this information proves that Linux and UNIX are just as prone to Trojan horse attacks as any other OS, despite press reports to the contrary, and that Mac OS X, which is based on UNIX, is also vulnerable to such attacks. Even more troubling, perhaps, is the use of open-source software in routers, Web servers, firewalls, and other Internet-connected solutions. The Aberdeen Group says that this situation sets up these devices and software products to be "infectious carriers" that intruders can easily usurp.

                  According to the Aberdeen Group, the open-source community's claim that it can fix security vulnerabilities more quickly than proprietary developers can means little. The group says that the open-source software and hardware solutions need more rigorous security testing before they're released to customers. This statement is particularly problematic because many Linux distributions lack the sophisticated automatic-update technologies modern Windows versions contain.
                  "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
                  Ben Kenobi: "That means I'm doing something right. "

                  Comment


                  • #10
                    Asher, you are so pro-microsoft you are starting to even scare me...
                    For there is [another] kind of violence, slower but just as deadly, destructive as the shot or the bomb in the night. This is the violence of institutions -- indifference, inaction, and decay. This is the violence that afflicts the poor, that poisons relations between men because their skin has different colors. - Bobby Kennedy (Mindless Menance of Violence)

                    Comment


                    • #11
                      Just the facts, Fez, just the facts.

                      It annoys the hell out of me when Linux zealots run around saying everyone should switch to Linux because it's more secure.

                      Whoever's saying that obviously doesn't check for updates, my Linux partition gets about 30 security patches a week. (literally)
                      "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
                      Ben Kenobi: "That means I'm doing something right. "

                      Comment


                      • #12
                        Cute Asher.. very cute.. You really know how to clobber people with those things you call facts... Well you aren't as bad as MtG.
                        For there is [another] kind of violence, slower but just as deadly, destructive as the shot or the bomb in the night. This is the violence of institutions -- indifference, inaction, and decay. This is the violence that afflicts the poor, that poisons relations between men because their skin has different colors. - Bobby Kennedy (Mindless Menance of Violence)

                        Comment


                        • #13
                          Originally posted by Fez
                          Well you aren't as bad as MtG.
                          As good as, you mean.

                          By the time I get to be his age, I sure as hell hope I am.
                          "The issue is there are still many people out there that use religion as a crutch for bigotry and hate. Like Ben."
                          Ben Kenobi: "That means I'm doing something right. "

                          Comment


                          • #14
                            Originally posted by Asher

                            As good as, you mean.

                            By the time I get to be his age, I sure as hell hope I am.


                            Stay away from me.. Anybody who has MtG as one of their rolemodels will successfully scare me away.

                            Just imagine.. Asher taking control of this forum...
                            For there is [another] kind of violence, slower but just as deadly, destructive as the shot or the bomb in the night. This is the violence of institutions -- indifference, inaction, and decay. This is the violence that afflicts the poor, that poisons relations between men because their skin has different colors. - Bobby Kennedy (Mindless Menance of Violence)

                            Comment


                            • #15
                              linux sucks - it isn't Windows

                              you want a secure, efficient, powerful, RELIABLE OS? get windows XP

                              Comment

                              Working...
                              X