We have OWASP to tell us about common security vulnerabilities in webapps and such, but what are the most common infection vectors for personal computers?
A few example vectors:
- Social engineering (trojans)
- Browser exploits
- Document / application exploits (e.g. PDF, Office, etc)
- Remote code execution in OS services
I'm particularly interested in any academic papers, preferably relatively new (last 3-4 years), and any decent statistical analyses of attacks and infections.
If there's anything out there on the geographic distribution of these types of attacks, I'd be interested in that too.