IBM security experts: World Wide Web, web2.0 and cloud computing are not secure

"The World Wide Web, web2.0 and cloud computing are not safe," said Peter Allor, IBM's senior security strategy expert and network event and vulnerability management program. "Who is more secure in the World Wide Web, web2.0 and cloud computing?" he asked in a speech about cyber-security trends. Immediately he replied: "It's not safe." "Now the threat of corporate IT security is shifting from web1.0 to web2.0, and the future will be a threat to cloud computing," he said. "IBM's latest 2008 annual X-force report points out that the site has become the weakest link in enterprise IT security." Attackers focus on network applications to infect computer terminals. At the same time, the out-of-the-box applications used by the enterprise are riddled with vulnerabilities, and their custom applications may have a large number of unknown vulnerabilities that cannot be patched. It is reported that the vulnerabilities discovered in 2008 are mostly related to network applications, of which more than 74% of the vulnerabilities do not have patches. As a result, the massive emergence of SQL Automation injection vulnerabilities in early 2008 has not diminished. A SQL injection attack began in the summer of 2008, and the number of attacks by the end of 2008 soared 30 times times. Peter tells us: "In 2008, the use of security vulnerabilities to launch remote attacks accounted for more than 90%." He also stressed that the operating system is not the key to security vulnerabilities, the real disaster in the network applications, "operating system is only the web1.0 era of security issues, while in the cloud computing environment, the key issues in the network application." "The Security Council, which also serves the 44th President of the United States, says:" Companies can only guarantee continuous innovation if they increase safety. ”