Aberdeen Group Reports on "The Virtues of Virtual Patching"-- Trend Micro Deep
Security 9 Solves Organizations' Patching Challenge
CUPERTINO, Calif., Nov. 13, 2012
CUPERTINO, Calif., Nov. 13, 2012 /PRNewswire/ -- With the publication of its
Analyst Insight on "The Virtues of Virtual Patching," research firm Aberdeen
Group raises awareness on alternatives to endless cycle of Patch Tuesdays,
emergency patches and workarounds, regression testing and unplanned downtime.
Aberdeen's findings show that while current use of patch management is
foundational for success, taken by itself it does not differentiate top
performance – in other words, success is not only a function of whether a
company patches, but also a function of how.
Selected highlights from Aberdeen's research and analysis include:
oOn average, about three-fourths (75%) of all companies have current
deployments of patch management.
oEven if your patching is 100%, some significant residual risks will remain
oVendors in general are unable to keep pace with the number of
vulnerabilities and threats: industry sources report that just 58% of the
vulnerabilities disclosed in 2011 had vendor patches available on the same
day, and 36% still had no patch available three months into 2012.
oBased on Aberdeen's research, the average total cost of a security
incident was $130K; incidents that involved loss or exposure of sensitive
data saw an average total cost per incident of as much as $640K.
oAn important patch management strategy to consider is to buy more time;
virtual patching refers to the strategic deployment of selected
compensating controls to provide a kind of protective shield that allows
the organization more time to assess, plan, test, and remediate threats
and vulnerabilities on a schedule of their own choosing.
oVirtual patching is one way that companies deal with security issues in
their applications. Aberdeen's research shows that the leading
organizations are 2-times more likely (57%) than lagging performers to use
virtual patching (26%).
Trend Micro's Deep Security is comprised of anti-malware, web reputation,
firewall, intrusion prevention, integrity monitoring and log inspection
technologies in one integrated solution. This server security platform uses
virtual patching to protect physical, virtual, and cloud servers and virtual
desktops from known vulnerabilities and zero-day exploits without expensive
emergency patching. Deep Security leverages both agentless and agent-based
protection mechanisms to automatically and efficiently secure virtual servers
and desktops, and private and public clouds and accelerate ROI.
"Virtual patching can represent a strong operational and financial case for
the business," said Derek Brink, vice president and research fellow for IT
Security at Aberdeen Group. "Among several other advantages, it can give
enterprises the flexibility to patch on their own schedule, and it can help to
mitigate the high opportunity cost of unplanned downtime, which can easily
range to tens of thousands of dollars per hour. Companies should give strong
consideration to virtual patching as a strategy to augment their traditional
patch management processes, and to improve the overall efficiency and
effectiveness of managing the vulnerabilities and threats to their IT
Link to Aberdeen Group Report - The Virtues of Virtual Patching
About Trend Micro
Trend Micro Incorporated (TYO: 4704; TSE: 4704), the global cloud security
leader, creates a world safe for exchanging digital information with its
Internet content security and threat management solutions for businesses and
consumers. A pioneer in server security with over 20 years' experience, we
deliver top-ranked client, server and cloud-based security that fits our
customers' and partners' needs, stops new threats faster, and protects data in
physical, virtualized and cloud environments. Powered by the industry-leading
Trend Micro™ Smart Protection Network™ global threat intelligence data mining
framework, our products and services stop threats where they emerge – from the
Internet. They are supported by 1,000+ threat intelligence experts around the
Additional information about Trend Micro Incorporated and the products and
services are available at Trend Micro.com. This Trend Micro news release and
other announcements are available at http://newsroom.trendmicro.com/ and as
part of an RSS feed at www.trendmicro.com/rss. Or follow our news on Twitter
SOURCE Trend Micro Incorporated
Contact: Alan Wallace, Trend Micro, Senior Global PR Manager, +1-425-522-3180,
Press spacebar to pause and continue. Press esc to stop.