Re: Blaster: Take our survey

• Previous message: Russ: "The list is just fine thanks"
• Maybe in reply to: Russ: "Blaster: Take our survey"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date:         Fri, 29 Aug 2003 16:49:27 -0400
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

Results are in. I hope to see this up on the TruSecure website soon, but
in the meantime here's the meat.

----
TruSecure / ICSA Labs
TruSecure Blaster Impact Study
Semi-Final Results
August 29, 2003
MS Blaster Impact Among "Corporations"	
There were 1504 total survey respondents worldwide.   Removing
respondents with less than 100PCs and with other significant
discrepancies in their answers left 882 respondents who provided
complete, valid survey that matched our criteria for "Corporations"  
Of the organizations with more than 100 PCs surveyed during the week
after MS Blaster worm:
22.6% were infected on the Inside.  A larger proportion had some
significant impact (see below)  
Size of company   Percent with       $ Impact per  
# of Computers    Moderate or        infected company 
(employees)       Major Impact       (includes hard, soft & productivity
costs) 
100K - 500K       55.0%              $2,400,000 
50K - 95K         41.6%              $4,228,000 
10K - 50K         33.8%              $3,458,741 
5K-10K            39.0%              $1,452,288 
1K - 5K           30.6%              $474,847 
500 - 1,000       19.8%              $84,207 
100 - 500         11.1%              $79,863 
Percent of all companies with moderate or major impact: 34%	
Total Blaster Impact on median "average" company:       $475,000
MS Blaster Among all Survey Respondents
19.8% of all valid respondents said they had experienced an infection
from Blaster.  The proportion that experienced some impact was
significantly higher than those who were infected.  
The Breakdown of Organizational impact as are percents of all survey
respondents including more than 700 respondents with less than 100
employees (partial, incomplete otherwise invalid answers were removed
from all tabulations):  
4.6%  Major impact 
10.0% Moderate Impact
30.3% Minor impact
55.1% No impact
Of those who reported moderate impact, average and median reported
costs:	
Average:   $101,934.46 
Median:    $6,500.00 
Of those who reported Major impact, average and median reported costs:
Average:   $494,391.41 
Median:    $55,000.00 
Previous studies suggest that the median value is the best to use, but
that the technical people who participate in this study underestimate
total costs by about 7-fold. Therefore we believe actual median business
impact for all sizes of respondents (from 1 computer to over 500,000
computers) was:
Median Business Impact for All Sizes of Respondents
$46,800 per company for respondents who reported moderate impact
$396,000 per company for respondents who reported major impact
Self-reporting source of infection:  
#1   Laptops
#2   VPN 
#3   Mis-configured router/firewall
Cheers,
Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
Whatever Happened to Octopus?
LEGATO RepliStor, formerly known as Octopus, delivers breakthrough
replication performance that's 5X faster than the competition in an
independent head-to-head test. Learn how RepliStor uses patented,
asynchronous, real-time replication, to deliver disaster recovery, data
distribution and consolidated backups. It is the first replication solution
to achieve Windows 2003 certification. Get the performance report now.
http://portal1.legato.com/products/replistor/upgrade.cfm
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

• Previous message: Russ: "The list is just fine thanks"
• Maybe in reply to: Russ: "Blaster: Take our survey"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]