The most effective way to prevent data breaches is to protect applications and databases with the right technology, while sticking with tried and tested methods.
This was the finding of an Imperva survey of more than 1,000 security professionals, which discovered web application firewalls, network data loss prevention, full drive encryption, server hardening and endpoint data loss prevention were the most popular technologies for reducing breaches.
"What we see is that organisations keep investing in more and more security technologies," Imperva chief technology officer Amichai Shulman told IT PRO.
"I think we are seeing organisations using more and more security controls, putting more layers of security in, not just relying on infrastructure security, but adding more data-related security controls."
In the report, the single most prevalent motivation for carrying out data protection initiatives was simply to improve security, Shulman explained.
Compliance was also found to be a key driver, with 88 per cent of respondents saying the Payment Card Industry Data Security Standard was the main motivator for deploying programmes.
Warning signs
Although the research, which was carried out by analyst firm Securosis, indicated companies are taking security more seriously, there were also some more worrying results.
Almost two-thirds of respondents said their organisations were either unsure if they had been hit by a data breach, or claimed they hadn't been affected at all.
"For me, if they don't know or claim they had no incident, it is basically the same. It shows that they really don't know," Shulman added.
"It clearly shows that they don't have the security controls in place even to be aware of data breaches."
Another concerning sign is that malicious intentions were behind 62 per cent of breaches at respondents' firms, 33 per cent from insiders and 29 per cent from outside hackers. The rest were accidental.
-
Ransomware attacks are rising — but quiet payouts could mean there's more than actually reportedNews Ransomware attacks continue to climb, but they may be even higher than official figures show as companies choose to quietly pay to make such incidents go away.
-
Google tells some remote workers to return to the office or risk losing jobsNews Google has warned remote workers will need to return to the office or else lose their jobs, according to reports.
-
Tech leaders worry AI innovation is outpacing governanceNews Business execs have warned the current rate of AI innovation is outpacing governance practices.
-
Top data security trendsWhitepaper Must-have tools for your data security toolkit
-
SEC data breach rules branded “worryingly vague” by industry bodyNews The new rules announced last week leave many questions unanswered, according to security industry experts
-
P2PInfect self-replicating Rust worm discovered attacking Redis instancesNews Researchers believe that the worm could be laying the groundwork for a larger campaign to be launched at some point in the future
-
The gratitude gapWhitepaper 2023 State of Recognition
-
Redefining modern enterprise storage for mission-critical workloadsWhitepaper Evolving technology to meet the mission-critical needs of the most demanding IT environments
-
MWC 2023: Huawei launches 'world's best' ransomware detection systemNews Huawei claims its Cyber Engine database security system has a 99.9% detection rate, but experts have been quick to weaken the sentiment
-
Dutch hacker steals data from virtually entire population of AustriaNews The data was stolen from a misconfigured cloud database found by the attacker through a search engine
