Linux hacks hit all-time high

Hackers are increasingly targeting non-Windows servers

Written by James Middleton

Security analyst mi2g has released research claiming that hack attacks against Linux are exploding, while attacks on Windows-based servers are dropping off.

May saw the highest number of attacks ever, according to mi2g, with 19,208 successful breaches worldwide recorded against Linux based systems.

Advertisement

Just 3,801 breaches were recorded against Windows, with other operating systems suffering from 2,275 attacks.

The US and UK were among the most attacked countries, partially as a result of the war with Iraq.

During the heat of the Slapper worm epidemic in January, Windows was accounting for 53 per cent of attacks, with Linux soaking up 34 per cent.

Data gathered by web defacement archive Zone-H over recent months also shows the line between Linux- and Windows-based web server defacements blurring to a point where it is hard to tell which is being hit harder.

DK Matai, executive chairman at mi2g, suggested that that there are three reasons for the recent increase in successful attacks against Linux.

First is configuration management. "As automatic attack tools scanning for vulnerabilities become ubiquitous, the online system security is heavily dependent on settings and when the last patch was applied," he said, citing out-of-the-box and un-patched installations.

Next up is the lack of a coherent trustworthy computing initiative such as that run by Microsoft.

Owing to the nature of open source there is no single point of reference for information about the dos and don'ts of online server management and security, according to Matai.

The third issue focuses on common misconceptions about the Linux operating system, which is being increasingly selected by companies and government agencies to cut costs.

Matai warned that the "cost-effective choice" of non-proprietary software does not stand up to scrutiny if there is inadequate technical experience deployed in protecting the systems, and if training costs are not factored in at the start.

"There are plenty of instances where the administrator assumes that just because they are running open source they are somehow going to be more secure," he said.

Get the latest news, views and technology updates in a weekly round up of the Penguin's unstoppable march by signing up to vnunet.com's FREE Linux newsletter here.

Tags:

Related articles

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation