Market Snapshot
  • U.S.
  • Europe
  • Asia
Ticker Volume Price Price Delta
DJIA 16,501.65 0.00 0.00%
S&P 500 1,878.61 3.22 0.17%
NASDAQ 4,148.34 21.37 0.52%
Ticker Volume Price Price Delta
STOXX 50 3,189.81 13.84 0.44%
FTSE 100 6,703.00 28.26 0.42%
DAX 9,548.68 4.49 0.05%
Ticker Volume Price Price Delta
NIKKEI 14,512.47 107.48 0.75%
TOPIX 1,174.20 9.30 0.80%
HANG SENG 22,442.36 -120.44 -0.53%

Cisco Annual Security Report: Threats Step Out of the Shadows

Cisco Annual Security Report: Threats Step Out of the Shadows

Research Reveals Mainstream Threats That Are Magnified by the World's Next Generation of Workers' Online Behavior

LONDON -- (Marketwire) -- 01/30/13 -- CISCO LIVE -- Cisco (NASDAQ: CSCO) today released findings from two global studies that provide a vivid picture of the rising security challenges that businesses, IT departments and individuals face, particularly as employees become more mobile in blending work and personal lifestyles throughout their waking hours.

Despite popular assumptions that security risks increase as a person's online activity becomes shadier, findings from Cisco's 2013 Annual Security Report (ASR) reveal that the highest concentration of online security threats do not target pornography, pharmaceutical or gambling sites as much as they do legitimate destinations visited by mass audiences, such as major search engines, retail sites and social media outlets. In fact, Cisco found that online shopping sites are 21 times as likely, and search engines are 27 times as likely, to deliver malicious content than a counterfeit software site. Viewing online advertisements? Advertisements are 182 as times likely to deliver malicious content than pornography.

Security risks rise in businesses because many employees adopt "my way" work lifestyles in which their devices, work and online behavior mix with their personal lives virtually anywhere -- in the office, at home and everywhere in between. The business security implications of this "consumerization" trend are magnified by a second set of findings from the Cisco Connected World Technology Report (CCWTR), which provides insight into the attitudes of the world's next generation of workers, Generation Y. According to the study, most Generation Y employees believe the age of privacy is over (91%), but one third say that they are not worried about all the data that is stored and captured about them. They are willing to sacrifice personal information for socialization online. In fact, more Generation Y workers globally said they feel more comfortable sharing personal information with retail sites than with their own employers' IT departments -- departments that are paid to protect employee identities and devices.

As Generation Y graduates from college and enters the workforce in greater numbers, they test corporate cultures and policies with expectations of social media freedom, device choice, and mobile lifestyles that the generations before them never demanded. As the first chapter of the Connected World Technology Report indicated in December, Gen Y is constantly checking social media, email and text updates, whether it's in bed (3 of 4 surveyed globally), at the dinner table (almost half), in the bathroom (1 of 3), or driving (1 of 5). That lifestyle is entering work environments in greater numbers, spotlighting the future of work and how companies must consider competing for the next wave of talent. Unfortunately, what the security studies show is the next-generation workforce's lifestyles are also introducing security challenges that companies have never had to address on this scale.

Key Findings

Android Malware

--  Android malware encounters grew 2,577 percent over 2012. (ASR)
--  However, mobile malware represents only 0.5 percent of total Web
    malware encounters. (ASR)
--  These trends become especially significant considering the smartphone
    is the No.1 device among Gen Y workers over laptops, PCs and tablets

Web Malware Encounters by Country In 2012, there was significant change in the global landscape of where users encountered Web malware. China dropped from being the second-most malware-stricken country in 2011 to the sixth spot last year. Scandinavian countries, such as Denmark and Sweden, experienced greater numbers of Web malware encounters, climbing the world ranking to the third and fourth spots, respectively. The United States retained the top spot with 33 percent of the world's Web malware encounters. (ASR)

1. United States                                             33.14%         
2. Russian Federation                                        9.79%          
3. Denmark                                                   9.55%          
4. Sweden                                                    9.27%          
5. Germany                                                   6.11%          
6. China                                                     5.65%          
7. United Kingdom                                            4.07%          
8. Turkey                                                    2.63%          
9. Netherlands                                               2.27%          
10. Ireland                                                  1.95%          

Spam Trends

--  Spam volume dropped 18 percent from 2011 to 2012, with spammers
    working "banker's hours" for a 25 percent drop in spam over the
    weekend. (ASR)
--  In 2012, the majority of spam was sent during the workweek -- Tuesday
    was the heaviest spam day of the year. (ASR)
--  India is the top source of spam worldwide, with the U.S. moving from
    sixth in 2011 to second in 2012. Korea, China and Vietnam round out
    the top five. (ASR)
--  The top spoofed brands involve prescription drugs like Viagra and
    Cialis and luxury watches like Rolex and Omega. (ASR)
--  Spammers maximize the ROI of their efforts, targeting real-world
    events with specific and short-lived campaigns. (ASR)
    --  January-March: Windows software, which coincided with the release
        of the Microsoft Windows 8 consumer preview.
    --  February-April: Tax software during U.S. tax season.
    --  January-March and September-December: Professional networks like
        LinkedIn, correlated with the desire for a career change during
        the beginning and end of the year.
    --  September-November: Cellular providers around the release of the
        Apple iPhone 5.

Privacy Tradeoff Cisco considered the business implications of these and other threat statistics by examining the attitudes and behavior of always-on, on-demand Gen Y employees.

--  Although most Gen Y respondents do not trust websites to protect
    personal information (75 percent), such as credit card and personal
    contact details, their lack of confidence does not deter their online
    behavior, gambling that they will not be compromised. This puts a
    large amount of pressure on companies when these individuals take
    risks online with work devices on corporate networks. (CCWTR)
--  Fifty-seven percent of Gen Y is comfortable with their personal
    information being used by retailers, social media sites, and other
    online properties if they will benefit from the experience. (CCWTR)

IT Policy Compliance

--  Nine of 10 (90 percent) IT professionals surveyed said they have a
    policy governing the use of certain devices at work, yet only two of
    five Gen Y respondents said they were aware of such a policy. (CCWTR)
--  To make matters worse, four out of five Gen Y respondents who were
    aware of IT's policies said they do not obey those policies. (CCWTR)
--  IT professionals know that many employees don't follow the rules, but
    they don't understand how prevalent it is: More than half (52 percent)
    of IT professionals globally believe their employees obey IT policies,
    but nearly 3 out of 4 (71 percent) of the Gen Y workforce 
say that
    they don't obey policies. (CCWTR)
--  Two of three (66 percent) Gen Y respondents globally said IT has no
    right to monitor their online behavior, even if that behavior is
    conducted using company-issued devices on corporate networks. (CCWTR)
--  The aversion to employer IT monitoring was greater than the aversion
    Gen Y respondents had to retail sites monitoring their online
    behavior. In other words, Gen Y is less averse to complete strangers
    at retail sites monitoring their activity than their own employers' IT
    teams -- teams that are there to protect them and their companies'
    information. (CCWTR)

The Internet of Everything & Security's Future Looking ahead, the Internet of Everything represents the largest online trend today. As more people, things and devices connect to the Internet, more data from more places will be introduced across corporate and service provider networks, which open up new vulnerabilities and a need for more sophisticated security approaches.

--  Exponentially more machine-to-machine (M2M) connections are coming
    online each day, leading to a proliferation of endpoints that extend
    far beyond mobile devices, laptops and desktops to an "any-to-any"
    scenario in which any device can connect to any cloud to any
    application across any network.
--  By 2020, with an Internet open to an estimated 50 billion things, the
    number of connections balloons to more than 13 quadrillion
    (specifically, 13,311,666,640,184,600). Adding just one more "thing"
    (50 billion + 1) will increase the number of potential connections by
    another 50 billion.(1)
--  These new connections generate data in motion that needs to be
    protected in real time as it is evaluated for actionable insights
    through the network and before it's compromised and causes irreparable
--  For network security professionals, the focus becomes content-neutral
    plumbing -- shifting from the endpoint and the periphery to the

Supporting Quote

--  John N. Stewart, senior vice president, chief security officer, Global
    Government and Corporate Security, Cisco
     "Each year, the security
    threats and defenses change as a result of one another. The Cisco
    Annual Security Report is our expert research, highlighting global
    threat patterns and trends. When combined with findings from the Cisco
    Connected World Technology Report and how the next-generation
    workforce views security, there are unique, troubling and informative
    correlations and conclusions. Today, we live a blended work-personal
    life. The hackers know this, and the security threats that we
    encounter online such as embedded Web malware while visiting popular
    destinations like search engines, retailers, social media sites and
    smartphone/tablet apps no longer threaten only the individual; they
    threaten our organizations by default. This year's ASR highlights this
    and other trends while providing the hard data, and ideas, for how we
    should be approaching security today."

About the Studies The Cisco 2013 Annual Security Report highlights the most important security trends of the year and provides tips and guidance to keep enterprise technology environments more secure. The Cisco Connected World Technology Report magnifies the threats outlined in the security report.

The third annual Cisco Connected World Technology Report was commissioned by Cisco and conducted by InsightExpress, an independent market research firm based in the United States. The global study consists of two surveys: one focused on college students and young workers 18 to 30 years old, and the second focused on IT professionals across a range of industries globally. Each survey includes 100 respondents from each of 18 countries, resulting in a pool of 3,600 respondents. The 18 countries are the United States, Canada, Mexico, Brazil, Argentina, United Kingdom, France, Germany, Netherlands, Russia, Poland, Turkey, South Africa, India, China, Japan, South Korea and Australia.


--  Read the Cisco 2013 Annual Security Report
--  Visit website: Cisco Connected World Technology Report
--  Read about the acquisition of Cognitive Security from Christopher
    Young, senior vice president of the Security and Government Group,
--  View video: Cisco's John N. Stewart, senior vice president, chief
    security officer, Global Government and Corporate Security, on
    Information Security: Understanding a Global Picture in a Local
--  For additional research on consumer shopping behavior read the January
    14, 2013, Cisco press release: Eight Out of 10 Consumers Shop Through
    Bits and Bytes
--  View video: Gen Y and Technology
--  Learn about: The Internet of Everything
--  Read Data in Motion insights
--  Join the security conversation on Twitter by following @CiscoSecurity.
    You can like Cisco Security on Facebook at
--  Learn more: Cisco Platform Blog
--  Read Cisco Blogs

About Cisco Cisco (NASDAQ: CSCO) is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected. For ongoing news, please go to

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

RSS Feed for Cisco:

(1) How the Internet of Everything Will Change the World... for the Better

Embedded Video Available:

Image Available:

Image Available:

Press Relations: David Oro Cisco 707-558-8585

Analyst Relations: Trevor Bratton Cisco 949-823-1212

Investor Relations Contact: John Choi Cisco 408-526-6651

Sponsored Links
Sponsored Links