Security Vulnerabilities

Security vulnerabilities have been measured by referring to the vulnerabilities reported to CERT for the years 1995 to 2006. Some of these are not specifically vulnerabilities for Internet infrastructure devices but are on the end users desktop or server (e.g. IIS vulnerabilities on customer servers). These vulnerabilities, however, contribute to the ability for financial crime to be carried out.

Figure 18 - Security vulnerabilities reported 1995 - 2006
[Source: CERT]