I’d like to know what you think is the Biggest threat to Information technology? Is it Script Kiddies or is it Organised Crime? Or do you think that ‘Humans’ are the weakest link and biggest threat to Information Technology. What ever your choice, do state atleast two reasons for your selection.
And if you think there is something else that’s an even bigger threat to IT then do mention it …
nos, I’m not sure if I understand your question - are you asking about threats towards a particular aspect of Information technology - say security threats? or about threats related to certain specific types of technologies - say desktop computing…
“the biggest threat to IT” just seems too vague of a question
I would vote for the social engineering, the desire to please and falling for a smiling face the biggest threat. Hence humans!
There was this company I consulted for who had the best firewalls, DMZ, AV, IDS yada yada. But their servers were located in a corner of the kitchen, which was one of the first doors you’d see when you enter their office. I guess we can blame that on human nature as well.
^ yeh, that's what I think as well. I think 'humans' are the weakest link in the chain, hence, the biggest security threat to IT.
Actually, I've got to prepare a presentation on "Hacking's Major Threat: Script Kiddies or Organized Crime". I did not choose the topic myself, it was assigned by our tutor. I just wanted to see what different people's opinion is on the subject.
Umar Talib: Do you think it would be appropriate to talk about 'Humans' as the biggest threat, even though its not mentioned in the topic?
I concur with Tofi - Social Engineering is indeed one of those threats which can exploit both known as well as unknown (read unexpected) vulnerabilities. You can't necessarily prevent them... you can't control them either... the best you can do is remedy them and/or have contingencies in place just in case.
^ … yeh right … this doesn’t really help me in my assignment. I just wanted to see what others in the field think about this topic, that’s all. I was trying to start a discussion here, which obviously wasn’t a great success. I’ve read something similar on SecurityFocus and I’ve noticed that those people (who comment there) really dissect the topic and speak at length and not only that … they discuss it with all seriousness … and that goes for you tofi …