85% of malware is now distributed through the Web

Webroot released primary research revealing the impact of Web 2.0 on the enterprise. An overwhelming 85 percent of malware is now distributed through the Web, but businesses are not adequately protecting themselves against Web-borne viruses, spyware and employee behavior that lead to security breaches, loss of intellectual property and release of confidential data.

Webroot also found that while businesses now depend on Web applications to execute critical functions including customer support, research and ad campaigns, IT professionals are not adequately aware of the Web 2.0 world or the new set of threats it has introduced. Only 15 percent of the businesses Webroot surveyed reported solid enforcement of Internet usage policies to reduce their organizations’ vulnerability. Industry research shows 49 percent of businesses allow employees unlimited access to social networking sites, which do not monitor their content for malware. Further, more than 85 percent of organizations still rely solely on desktop defenses which do not scan for malware in inbound Web traffic.

Webroot studied Web-related threats and how businesses defended against them over the past 12 months. Webroot surveyed 648 Web security product decision-makers in businesses across Australia, the United Kingdom, Canada and the United States.

The web is now the number one attack vector

• One out of four businesses reported a Web-based threat compromised confidential information, threatened online transactions or caused a Web server outage
• For the vast majority of respondents, Web-based threats were a greater source than e-mail-based threats for viruses and worms, spyware and security breaches.

Employees’ online behavior puts businesses at risk

• Three out of 10 organizations reported their businesses’ Web security was compromised by employees using personal Web mail accounts, visiting social networking sites and downloading videos
• Over a third of respondents estimate employees spend at least an hour per day on non-work-related sites.

Employee Internet usage policies and awareness are not enough

• Nearly half the businesses surveyed expressed concern about data breaches
• One out of five respondents did not know which compliance laws apply to their business
• Only 15 percent of respondents gave enforcement of their Internet usage policy an “A”.

Web applications are critical to business

• Web-based applications are extremely or very important for providing customer support at nearly half of the businesses surveyed
• Forty-four percent of respondents reported access to Web-based CRM, human resources and benefits applications are extremely or very important for their business
• Using the Web for marketing purposes is extremely or very important to over 44 percent of respondents.