Users Negligence is Biggest Threat to Security [LWN.net]

Evans Data Corporation has announced the results of its new Security Development Survey. "A quarter of developers found social engineering and lack of adherence to policies to be the biggest problem, while another 15% cite lack of qualified personnel. However, only 11% of developers felt the solutions were too complex or difficult for users. "As with any other security concern, the best technology in the world can be undone by untrained or inattentive end users, the same holds true for the development of secure computing applications and projects," said Glenn MacEwen, an analyst with Evans Data. "Until the culture of computing security evolves to encompass regular security practices, businesses and people will remain vulnerable to attack and exploitation.""

The report also finds that developers believe that implementing security does not have a negative impact on computing performance. In this editor's experience, end users cite the hassle factor as the main reason they circumvent the policies.