152 Chapter 5 n Diagnosing Attacks Table 5-2: Well-Known DoS Tools. 3.2 SYN, ICMP DoS 5.5 TCP FireFlood 1.2 HTTP Goodbye 3 HTTP Goodbye 5.2 HTTP.

• Denial Of Service Tool

Attacks involving malicious insiders cost UK businesses an average of £144,501, according to a study by the Ponemon Institute commissioned by professional services firm Accenture.

Distributed denial of service (DDoS) attacks have been the second most costly type of attack, with an average price tag of £96,668 per incident.

Business disruption and information loss represents the costliest consequence of cyber crime, accounting for 75% of losses in the UK.

The survey of 332 company representatives also revealed that organisations are working harder and spend more time trying to contain malicious code attacks (56.6 days) and malicious insiders (47.6 days), with ransomware being the fastest-growing type of attack, up 25% in the past year.

“This should be a concern to UK businesses when the average ransomware attack could cripple operations for as long as five weeks and the financial consequences of information loss are set to increase with the GDPR [EU General Data Protection Regulation] compliance deadline in May 2018,” said Rick Hemsley, managing director at Accenture Security.

“UK businesses needs to get the basics right, such as timely patching of their systems, and ensure they are protecting their most high-value assets from the inside out,” he added.

Other key findings of the survey include that UK companies experience 71 breaches a year on average, costing an average of £6.56m, up 21.2% in the past year, compared with the global average of 130 breaches per company each year.

Read more about insider threats

• Ward off insider healthcare security threats with this tech.
• Mainframe blindspots expose companies to insider threats.
• Crafting an insider threat program: Why and how.

In the light of the GDPR compliance deadline, it is not surprising that 68% of companies surveyed are deploying advanced identity and access governance systems.

The proportion of companies that are still investing in advanced perimeter controls is still relatively high at 63%, while 60% are deploying security intelligence systems, followed by “extensive deployment” of encryption technologies (55%), and “extensive use” of data loss prevention (50%).

Surprisingly, only 28% of companies are investing in the deployment of advanced technologies such as automation, orchestration and machine learning, which ranked third highest in terms of cost savings. Security intelligence systems ranked top, followed by advanced identity and access governance.

Read more about DDoS attacks

Denial Of Service Tool

• Criminal activity has become the top motivation for DDoS attacks, as the average attack becomes strong enough to down most businesses – so taking no action is not an option.
• Average DDoS attacks fatal to most businesses, report reveals.
• There is a real concern that many companies are being affected by the DDoS attacks commissioned by competitors, according to Kaspersky Lab.

Security suppliers are increasingly adding these features to their product sets in an attempt to reduce the workloads of information security professionals to enable them to focus on the more strategic aspects of cyber security.

According to Accenture, organisations should not rely on compliance alone to enhance their cyber defence capabilities.

It recommends that organisations carry out “extreme pressure testing” to identify vulnerabilities and balance traditional security spending with spending on new technologies, particularly security analytics and artificial intelligence to enhance the effectiveness of their cyber defences.

• In The Current Issue:
  • Microsoft’s modern desktop management
  • Giving healthcare tech a human touch
  • How Open University was educated to move from bespoke IT to vanilla SAP

• A hospice for a dying HE/FE funding regime - A review of the Augar Report– When IT Meets Politics
• ‘A breath of fresh air’ for Gov.uk Verify?– Computer Weekly Editors Blog

• E-commerce sites warned of heightened DDoS threat– ComputerWeekly.com
• Targeted cyber attacks doubled in past year, study ..– ComputerWeekly.com
• Major DDoS cyber crime website shut down– ComputerWeekly.com