Houston – August 15, 2017– Alert Logic, the leading provider of Security-as-a-Service solutions for the cloud, today announced the availability of its 2017 Cloud Security Report. The report analyzes customer data from more than 3,800 Alert Logic cloud, on-premises and hybrid cloud customers over an 18 month period, from August 1, 2015 to January 31, 2017. Report findings are based on an analysis of more than 2 million security incidents captured in Alert Logic intrusion detection systems and escalated by Alert Logic Security Operations Center (SOC) analysts to its customers over 555 days, 32.5 million events associated with those incidents and 147 petabytes of security data.
“We focused our analysis on incident types and the workloads and environments most at risk,” said Misha Govshteyn, Senior Vice President of Technical and Product Marketing. “Cyber attackers continue to seek the weakest spots in network defenses and businesses need to understand how they are refocusing to take advantage of the changing attack landscape.”
The Alert Logic customers in the report data set represent a broad range of industries (452 unique SIC codes) and organization sizes, from small-to-medium-sized businesses to large-scale enterprises. 82 percent of customer deployments analyzed hosted workloads in the cloud – either on an Infrastructure-as-a-Service platform or hosted private cloud – and approximately one-third maintained on-premises or cloud hybrid infrastructure.
While the report focuses predominately on OWASP Top 10 attack methods, three other significant categories of attack methods targeting Alert Logic customers are examined. These include brute-force attacks, server-side ransomware and undesirable outside reconnaissance.
Some of the top findings in the report include the following:
The report also examines five industry verticals – Finance Services and Insurance; Health Services; Information Technology and Services; Production, Manufacturing, and Logistics, and Retail and Accommodation – to pinpoint prevalent attack vectors and patterns within those sectors.
To download a full copy of the 2017 Cloud Security Report, visit here.