Malware attacks on enterprise networks have significant cost implications. Based on an industry survey conducted by Webroot in January 2007, almost half of the companies had incurred the costs of increased help desk time to repair spyware damage, disrupted business activities and reduced employee productivity.
In addition, more than a quarter of the companies stated that confidential information had been compromised as a result of spyware. Beyond the direct costs and impacts to employee productivity, failure to adequately protect enterprise IT systems from Internet security threats can also expose the company to legal liabilities.
Most alarming is the continuous trend towards more advanced techniques. Just a couple years ago, rootkits, Trojans, and polymorphic code were the most advanced methods being used; these are now becoming common ways to evade detection. Today’s spyware programs create permissions to gain network access, alter security settings and modify system properties and preferences.
Web sites continue to be a leading source for malware infections. The Threat Research Team at Webroot Software identified exploits on over 3 million Web sites in 2006.