IBM Security Predictions 2006

More from the predictions 2006 department. IBM recorded more than 1 billion suspicious computer security events in 2005, despite a leveling off in the amount of spam e-mail and a decrease in major Internet worm and virus outbreaks.

Enterprises should expect to see the same level of malicious traffic in 2006, even as online criminal groups shift to stealth attacks and cyber-extortion instead of massive, global malicious code attacks, said David Mackey, director of security intelligence at IBM. The Armonk, New York, company has released its IBM Security Threats and Attack Trends report for 2005.

The report details the top threats of the last year, and makes predictions about prevalent security trends in 2006. Here is what they predict:

1. Windows holes will continue to be a top security concern in 2006, even though Windows XP Service Pack 2 has made it more difficult to launch massive, automated attacks on that system.
2. Online criminals will increasingly use focused stealth attacks on organizations and individuals. Cyber-extortion using threats of DoS (denial of service) attacks or the disclosure of sensitive data will increasingly be used in 2006.
3. Botnets will continue to be the tool of choice for online criminals and criminal groups, though some may begin using instant messaging networks, rather than the popular IRC (Internet Relay Chat) protocol to control their minions.
4. Companies will also have to improve internal monitoring to catch insiders who are leaking confidential information or engaging in corporate espionage.
5. Wireless security threats are a major concern, as companies use the technology to empower mobile workers.
6. Users of Apple Computer Inc.'s OS X operating system will have to contend with more vulnerabilities and the potential for more attacks, as Apple shifts to the popular Intel chip platform for its Mac systems.
7. However, other much-hyped security trends are unlikely to break out in 2006, including attacks on VOIP (voice-over-IP) systems and on mobile devices, the report said.

In general, enterprises need to be vigilant and watch for low-level attacks, even when no major security threat is dominating headlines, Mackey said. "A lot of this stuff is under everybody's radar. It's a lot more concerning in that regard," he said.

CATEGORIES: 12006 predictions, 1predictions, 1ibm, 1report, 1trends