BREAKINGVIEWS - Hackers' successes will force security costs up

NEW YORK Wed Jun 8, 2011 4:36am IST

A Sony PlayStation gaming console controller is displayed at an electronic shop in Tokyo May 3, 2011. REUTERS/Kim Kyung-Hoon/Files

A Sony PlayStation gaming console controller is displayed at an electronic shop in Tokyo May 3, 2011.

Credit: Reuters/Kim Kyung-Hoon/Files

Related Topics

Stocks

   

NEW YORK (Reuters Breakingviews) - This may go down as the year of the hack, with Sony and Amazon among the targets. But the compromising of information on almost 40 million RSA security tokens, which protect sensitive military and financial networks, may be the most serious instance. Cybersecurity efforts -- and spending -- suddenly look inadequate.

RSA's devices are familiar in the worlds of banking and government. The keychain-like gadgets generate a six-digit number every minute or so. Users must enter the number along with a user name and password to access a network. Unfortunately, a sophisticated attack on RSA, the security division of EMC (EMC.N), suggests that a group of hackers found a way around the first part of the process.

Fortunately, that still left other security walls in place, such as passwords. Moreover, the attacks seemed extremely specific -- defense contractors including Lockheed Martin (LMT.N) seem to have been the only parties that have been subject to attempts to break into their systems. Unfortunately, this relatively good news isn't enough in the world of computing security.

Passwords can be broken through simple means such as calling users and saying that "IT needs your password to update your system". And financial companies can't rest easy knowing they haven't yet been targeted. A foreign power willing to steal sophisticated U.S. weapons systems may also be interested in destabilizing America's financial system -- and enterprises in places not friendly with the West might worry the same the other way around.

RSA's offer to issue new tokens should prevent further intrusions this time. Yet the possibility that companies, especially financial institutions, could have seen their crown jewels exposed will surely cause consternation in executive suites. And with computer networks increasingly critical to global business and powerful technology readily accessible to governments, criminals and amateur hackers alike, the recent attacks won't be the last such effort.

Consultancy Forrester estimates that security ate up about 8 percent of North American and European corporate IT budgets in 2007, and that figure grew to 14 percent in 2010. With companies now anxious not to be the ones hacked next time, that figure looks sure to go up.

CONTEXT NEWS

-- RSA, the security division of EMC, on June 6 offered to replace customers' security tokens after defense contractors including Lockheed Martin were attacked by hackers. The assaults were made possible by a breach of RSA's internal network that in turn compromised the security tokens. The company admitted on March 17 that there had been an intrusion.

-- SecurID is an authentication system that allows two forms of security. The keychain-like devices generate a six-digit number every minute or so. Users must enter the number along with a user name and password to access a network.

-- RSA offered to replace tokens for customers and is working to bolster other layers of customers' security. RSA has issued more than 40 million of the devices.

-- RSA statement: link.reuters.com/zud99r

(Editing by Jeffrey Goldfarb and Martin Langfield)

(The author is a Reuters Breakingviews columnist. The opinions expressed are his own)

FILED UNDER:
Comments (0)
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.

  • Most Popular
  • Most Shared

Market Eye

REUTERS SHOWCASE

Bullish on Equities

Bullish on Equities

Bullish on Indian equities, but gains seen 'less sharp'- Goldman Sachs  Full Article 

Streamlining Operations

Jet Streamlines

Jet Airways chairman says looking to restructure debts, talking to bankers  Full Article 

Political Economy

Political Economy

Analysis - Watch what markets don't do as world politics turns nasty   Full Article 

Photo

Honda's India Thrust

Honda's India unit to account for 25 pct of Asia Pacific sales by March 2017 - exec   Full Article 

Short of Expectations

Short of Expectations

Apple revenue lags Street's view despite strong China growth  Full Article 

Mircosoft Results

Microsoft Results

Microsoft revenue rises, profit falls as Nokia absorbed  Full Article 

Relief For Sahara

Relief For Sahara

Supreme Court could allow Sahara boss to conduct asset sale talks, company says.  Full Article 

Photo

Food Scandal

Five held in China food scandal probe, including head of Shanghai Husi Food   Full Article 

Reuters India Mobile

Reuters India Mobile

Get the latest news on the go. Visit Reuters India on your mobile device.  Full Coverage