Is Java Putting Your SMB At Risk? - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Mobile // Mobile Applications
Commentary
10/27/2010
12:28 PM
Keith Ferrell
Keith Ferrell
Commentary
50%
50%

Is Java Putting Your SMB At Risk?

Java exploits are on the rise, and sharply so, exceeding PDF attacks by a factor of 60 to 1, according to Microsoft. Is it time to cut off Java in your workplace?

Java exploits are on the rise, and sharply so, exceeding PDF attacks by a factor of 60 to 1, according to Microsoft. Is it time to cut off Java in your workplace?There's an unavoidable, I think, progression in the growth of attacks against Java.

That progression, as pointed out in a recent Microsoft security blog, has steepened dramatically over the past couple of years, with the quarter just ended showing -- according to Microsoft -- more than 6 million attacks aimed at Java, compared to around 100,000 targeting PDF vulnerabilities.

The reason for the growth? Java -- and its vulnerabilities -- may not be as obvious even to security-savvy businesses as browsers, applications and other common attack targets. This is a dilemma with anything that runs in the background, but Java's popularity makes Java a bigger dilemma.

As a result -- along with other factors including the number of Java versions out there -- the number of unpatched Java holes remains higher than the number (still too high) of unpatched or not-upgraded higher profile programs.

Which begs the question, in some ways.

While you should take an inventory of your business's Java deployments, and take steps to ensure that every version in your system is the latest version, you should also ask yourself:

Just how much Java does the business really need?

What business purposes are served by providing employees Java-enabled platforms?

If you can't come up with a good answer to that one, your Java audit should also include a Java-disabled audit.

Of course, if you're running a Mac-based business, Java and its vulnerability issues is increasingly irrelavent.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Slideshows
IT Careers: 10 Industries with Job Openings Right Now
Cynthia Harvey, Freelance Journalist, InformationWeek,  5/27/2020
Commentary
How 5G Rollout May Benefit Businesses More than Consumers
Joao-Pierre S. Ruth, Senior Writer,  5/21/2020
News
IT Leadership in Education: Getting Online School Right
Jessica Davis, Senior Editor, Enterprise Apps,  5/20/2020
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
Key to Cloud Success: The Right Management
This IT Trend highlights some of the steps IT teams can take to keep their cloud environments running in a safe, efficient manner.
Slideshows
Flash Poll