CyberEdge-2019网络威胁防御报告（网络安全）（英文）-2019.6-50页_6mb

2019 Cyberthreat Defense Report Summary

Core Content

The 2019 Cyberthreat Defense Report (CDR) by CyberEdge Group provides an in-depth analysis of the current and future state of cyberthreat defense practices across global IT security professionals. The report spans 17 countries and 19 industries, offering insights into the effectiveness of existing security postures, concerns about emerging threats, and the direction of future investments and strategies.

Main Points

1. Current Security Posture

• Successful Cyberattacks:

  • 78% of organizations experienced a successful cyberattack in the past 12 months, up from 77% in 2018.
  • 9.4% of organizations reported more than 10 successful attacks, up from 9%.
  • Mexico saw a significant improvement, moving from the highest-affected country in 2018 to the middle of the pack.
  • China, Turkey, and Spain are the most pessimistic about future attacks.
  • Retail, education, and telecom & technology industries are most concerned about cyberthreats.
  • Mid-sized enterprises (5,000–9,999 employees) were most affected by cyberattacks, at 88%, compared to 73.9% for large organizations and 66.7% for small ones.

• Security Posture by IT Domain:

  • Traditional IT components (websites, servers, datastores) are easier to defend, with average ratings of 3.95 (datastores) and 3.67 (mobile devices).
  • Application containers and OT devices are more challenging to secure, with ratings of 3.86 and 3.86 respectively.
  • The overall average security posture rating across all IT components remains at 3.82, showing no significant change from 2018.

2. Perceptions and Concerns

• Top Cyberthreat Concerns:

  • Malware, spear phishing, and ransomware remain the top three threats for the third consecutive year.
  • Ransomware is on the rise: the percentage of organizations victimized by ransomware, paying ransoms, and losing data due to non-payment has increased.
  • Security data overload: IT professionals are overwhelmed by the volume of security data, making it difficult to manage and respond effectively.

• Cloud Security and Skills Shortage:

  • Over half of organizations are re-training existing IT staff to address cloud security challenges.
  • 84% of organizations report an IT security skills shortage, up from 81% in 2018.
  • User security awareness is seen as a strong area, with a rating of 3.90, though it remains a major concern.

3. Current and Future Investments

• IT Security Budget:

  • On average, IT security consumes 12.5% of the overall IT budget.
  • 4.9% increase in average security budget in 2019, the highest single-year increase in the report's history.

• Technology Investments:

  • Security analytics is the most-wanted security management and operations technology.
  • Web application firewalls (WAFs) are the most widely deployed app/data security technology for the second consecutive year.
  • Advanced security analytics, next-gen firewalls (NGFWs), and deception solutions are top network security technologies planned for acquisition.
  • Containerization/micro-virtualization is the top endpoint security technology to acquire in 2019.
  • Biometrics is the most sought-after identity and access management (IAM) technology for the coming year.
  • Machine learning (ML) and AI are increasingly adopted, with over 90% of organizations investing in these technologies and over 80% reporting measurable improvements in threat detection.

4. Practices and Strategies

• SSL/TLS Inspection:

  • Decryption of SSL/TLS traffic remains a persistent challenge for 75% of organizations.

• Threat Intelligence Platforms (TIPs):

  • Enterprises are increasingly sourcing TIPs to improve threat detection and validate alerts.

• Security Analytics Adoption:

  • Purchasing a standalone product to complement an existing SIEM is the preferred approach for adding security analytics capabilities.

• Security Orchestration, Automation, and Response (SOAR):

  • Forward-thinking organizations are adopting SOAR solutions to accelerate SecOps tasks.

• Managed Security Service Providers (MSSPs):

  • 90% of organizations use MSSPs to offload at least one IT security function.

Key Information

• The report is based on responses from 1,200 qualified IT security decision makers and practitioners from organizations with more than 500 employees.
• It includes insights from 17 countries and 19 industries, making it the most geographically comprehensive and vendor-agnostic study in the field.
• The CDR highlights the growing complexity of cyberthreats and the challenges faced by IT security professionals in managing them.
• It emphasizes the importance of continuous investment, improved skills, and effective deployment and management of security technologies.

Research Methodology and Sponsors

• The report uses a survey-based approach to gather data on IT security practices, perceptions, and investments.
• Research Sponsors include PLATINUM (CODE42, DXC Technology, Gigamon, Imperva, StackRox), GOLD (Aqua, LookingGlass, Recorded Future), and SILVER (others).
• The report is published by CyberEdge Group, a leading authority in IT security research.

The Road Ahead

The report concludes with a section on The Road Ahead, which outlines the direction of the cybersecurity landscape and provides recommendations for IT security leaders to enhance their defenses. It stresses the need for:

• Better integration of security technologies.
• Improved threat-hunting capabilities.
• Addressing the skills shortage in the IT security workforce.
• Leveraging emerging technologies like ML and AI for advanced threat detection.
• Optimizing existing tools and practices to align with evolving threats.

Conclusion

The 2019 Cyberthreat Defense Report underscores the ongoing challenges in the cybersecurity domain, including the rise in ransomware, the difficulty of managing security data, and the persistent IT security skills shortage. It also highlights the growing importance of security analytics, threat intelligence, and SOAR solutions in the fight against advanced threats. Organizations are increasingly investing in these areas, and the report serves as a valuable resource for IT security professionals to benchmark their practices and strategies against global peers.