Four Key Findings from the 2022 Cyberthreat Defense Report

For the ninth year, Imperva is proud to sponsor CyberEdge Group’s annual Cyberthreat Defense Report. In this report, CyberEdge Group delivers a detailed accounting of how IT security professionals perceive cyberthreats today and reveals actionable insights into how they plan to defend their enterprises against them. To develop these findings, CyberEdge Group surveyed 1,200 IT security decision-makers and practitioners to help the greater IT security community gain a better understanding of how their concerns, and plans for addressing them, benchmark against their counterparts in the industry.

Here are four key findings from the 2022 Cyberthreat Defense Report:

1. In 2022, IT security professionals are most worried about three types of network-based attacks
Overall on a scale of 1 to 5, IT security professionals are most concerned with Account Takeover (ATO) and credential stuffing attacks (rated 3.97), denial of service (DoS) attacks (rated 3.85), and web application attacks such as SQL-injection and XSS attacks (rated 3.83).

2. Four specific web and mobile application attacks represent the greatest concern
46.6 percent of respondents listed Personally Identifiable Information PII harvesting, 45.5 percent said ATO and credential stuffing attacks, and 39.6 percent selected carding and payment fraud attacks. Digital skimming and Magecart attacks were fourth, cited by 33.2% of respondents.

3. API protection and web application firewall (WAF) technology have emerged as essential technologies for application and data security
To take on the aforementioned threat vectors, more than 60% of IT security decision-makers and practitioners have these technologies currently in use. The three most popular technologies that respondents plan to acquire in 2022 include bot management, advanced security analytics, and database activity monitoring (DAM).

4. IT security decision-makers and practitioners have identified five major benefits that unifying application and data security defenses help them gain
Based on their 2022 findings, CyberEdge Group suggests,“ a unified platform for application and data security is one of those areas in cybersecurity where integration and single-vendor sourcing just make sense.” This approach reduces the complexities of working with incompatible management and reporting tools and working with multiple vendors. Respondents cited these five specific benefits: improved cloud security posture (58.5 percent), improved customer support experience (48.4 percent), enhanced security incident investigations (45.8 percent), simplified security rules management (43.6 percent), and fewer third-party integrations to manage (32.9 percent).

Get more information about this CyberEdge Group report

• Click here to get a free full copy of the 2022 Cyberthreat Defense Report.
• For an Executive Brief of the full report, click here.
• Download a handy infographic highlighting major findings here.

Imperva delivers industry-leading unified application and data security solutions

As attack vectors become more sophisticated and the threat landscape grows, depend on Imperva to protect your applications and data, no matter where they reside. Regardless of where your organization is on the application and data protection journey, Imperva can help. Contact a solutions representative to learn more.