Number of Web Application Hacks Up

An anonymous reader writes "According to an article at Information Week, 'Web site hacks are on the rise and pose a greater threat than the broad-based network attacks...' Citing statistics from the Web Hacking Incidents Database, 'Web hacking attacks numbered 58 in 2005, up from 16 in 2004 and 9 in 2003. Another 20 attacks have been reported this year against sites including open-source repository Sourceforge.net and social network MySpace.com, putting 2006 on pace to be the worst year yet.'"

Number of hacking attempts

[mysqlrocks]

Web hacking attacks numbered 58 in 2005, up from 16 in 2004 and 9 in 2003, according to the Web Application Security Consortium.

And what percentage of "web hacking attacks" are reported to the Web Application Security Consortium? I would venture to guess that a very small number are reported making these numbers statistically meaningless.

Don't give the "hackers" that much credit...

[Ravatar]

I wouldn't say the focus should be on the fact that there are a higher amount of attacks, rather the focus should be on people writing web applications with security low on their priority list.

This article is scaremongering

[eln]

First off, we're talking 58 attacks in a whole year out of how many millions of websites? Those are pretty good odds.

Also, the article states this is a big deal partly because more financial institutions are offering services online. But then, they state one of the major reasons for the problem is that web applications are generally not coded with security in mind. If you're coding a web app for a financial institution, and security is not the number one issue on your mind, you should be fired, and the financial institution should be put out of business for hiring your dumb ass in the first place.

Re:Number of hacking attempts

[techno-vampire]

That depends. Even if only a small percentage of all web attacks are reported, if that percentage stays stable then a rise in the number reported implies a rise in the total number of attacks. Of course, we don't know if, in fact, the precentage has remained stable or if it's simply that a larger percentage are being reported.

You've got to be Kidding!

[Bananas]

You call double-digit hacks a growing trend? Where do these folks live, under a rock? Don't tell me you've never heard of Attrition.org [attrition.org]? Just how many HUNDREDS of sites were defaced in the past?

AJAX hacks will be cracked

[PietjeJantje]

The number of cracks will rise because of AJAX hacking.
It's not only the interface and usability which takes a leap in complexity if you want to keep stuff working.
First, you have data communication on the background, for everyone curious to see. Second, there's a leap in usage and development and thus potential for crackers. Last, the average AJAX developer is inexperienced.