RE: Network security at risk from “user’s negligence” says report
Evans Data Corporation’s just-published Security Development Survey found that one in four developers believe that the biggest hurdle to computing security is end users who refuse to adhere to, or circumvent, polices.
In the study, Evans found that “a quarter of developers found social engineering and lack of adherence to policies to be the biggest problem, while another 15% cite lack of qualified personnel.” At the same time, just 11% of the developers surveyed reported that solutions were too complex or difficult for users.
“As with any other security concern, the best technology in the world can be undone by untrained or inattentive end users, the same holds true for the development of secure computing applications and projects,” said Glenn MacEwen, an analyst with Evans Data.
Other findings from the Summer 2004 survey of more than 400 Database developers and IT mangers included:
Developers are split down the middle on which libraries and APIs to use when building security applications. Seventeen percent use Java security APIs and seventeen percent use Microsoft Web Services Extension (WSE). OpenSSL is a strong second choice at 15%.Twenty five percent of developers believe that the Linux operating system has the best innate security. Windows 2003 is a close second at 19%.
IBM was viewed as the leader in security tools and infrastructure.
[Via DesktopLinux.com]