Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I know this is an odd question, but out side of social engineering is there a single (or perhaps small group) of attack vectors that are responsible for most fiscal damage?

I'm not looking for a debate on this, but any information for experience would be great.

share|improve this question
This is quite open ended. – Lucas Kauffman Sep 28 '12 at 21:26
1  
Let me point you to the Verizon Data Breach Investigations Report for some statistics. That said, you've asked a very open-ended question that probably can't be well-answered. – Jeff Ferland♦ Sep 28 '12 at 22:09
Agreed. The problem is that, even if we were able to give a definitive answer right now, it'd be completely invalid after a few months. – Polynomial Sep 29 '12 at 13:25
I would have loved to see an answer here, and I think it's a very valuable question to answer. If you could definitively answer "brute force password attacks make up 68% of all attacks that result in more than $1000 of damage", for example, that would teach newcomers the value of password strength (or public/private keys), and maybe get them to enforce standards more strictly, etc. Or, for me, I wonder what sort of software is most often attacked (web server, SSH, etc.), so I know which of my packages to spend the most time hardening. – orokusaki May 6 at 14:19

closed as not constructive by Lucas Kauffman, Jeff Ferland♦ Sep 28 '12 at 22:08

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.

Browse other questions tagged or ask your own question.