In Depth

Lessons from the Third Annual E-Crime Survey

Page 2

techniques. The top-scoring answers include some of the usual suspects, but CISOs will want to look at

whichever high-ranked pieces are not part of their current set of basic defenses.

valign="top">Technologies most commonly rated as "very effective" or

"somewhat effective" in detecting and/or countering security events:

Stateful firewalls	bgcolor="#cccccc" width="33%"> 87%
width="75%">Electronic access control systems	bgcolor="#cccccc" width="33%"> 86%
width="75%">Password complexity	bgcolor="#cccccc" width="33%"> 80%
width="75%">Network-based antivirus	bgcolor="#cccccc" width="33%"> 74%
width="75%">Encryption	bgcolor="#cccccc" width="33%">74%
width="75%">Application layer firewalls	bgcolor="#cccccc" width="33%">73%
width="75%">Heuristics-based spam filtering	bgcolor="#cccccc" width="33%">71%
width="75%">Badging	bgcolor="#cccccc" width="33%">68%
width="75%">Network-based policy enforcement	bgcolor="#cccccc" width="33%">67%
bgcolor="#cccccc">At the bottom of the totem pole were manual patch management, surveillance and wireless monitoring.