David Litchfield, head of NGS Software, said the researchers scanned one million randomly chosen IP-addresses for open standard ports used by Oracle and Microsoft SQL Server. As a result of scanning was found 157 servers based on SQL Server and Server 53 on Oracle Database.
' Extrapolating these data with respect to the number actually engaged in IP-addresses on the Internet, we can say that today the Internet employs approximately 368,000 servers based on Microsoft SQL Server and 124 000 based on the Oracle', - says Litchfield.
Two years ago, the company also counts the database server, but then analysts have counted a total of about 350,000 servers, SQL Server database and Oracle.
According Litfilda, there is a huge number of working servers that not only did not adequately protected, but also there is no mass security patches issued by vendors. About 4% of server SQL Server is not properly protected, and is not patched.
About 82% of SQL Server users using an older version of SQL Server 2000, but even in this case, less than half of users have installed the latest set of patches released for this version of the DBMS.
As users of DBMS Oracle, the picture is as bleak - about 13 % of users are using older versions of the database, the most common version is Oracle 9. 0, and that the manufacturer has already released two newer versions, and for Oracle 9. 0, there are many exploits.
Another scourge of modern servers running on the network NCS Software refers to open ports to the OS, and either a complete lack of a firewall, or its configuration is incorrect.
The number of sufficiently secure systems, according to NSG Software fluctuates at around 5-7% of the total number of database servers, and, most of them make up the Oracle. Analysts call this situation a little strange, because SQL Server is much simpler to install, it does not work under a variety of OS and security patches for it somewhat easier to install and operate on the server.
CyberSecurity. RU.
No comments:
Post a Comment