Survey gauges Web application security spending

Not much data exists on what percentage of security budgets are dedicated to building strong Web apps

A new survey shows that despite the dismal economic conditions, more than a quarter of the companies polled expect to spend more on Web application security this year.

Data on Web application security is scarce, according to the project's founders. The new survey is intended to be conducted quarterly.

Companies often save money through Internet-based sales, but also face risks such as data breaches and a subsequent loss of consumer confidence in their services.

The Security Spending Benchmarks Project comes from the Open Web Application Security Project (OWASP), dedicated to good Web application security practices.

The benchmarking survey is headed by Boaz Gelbord, who is also executive director of information security at Wireless Generation, along with help from Jeremiah Grossman, CTO and founder of White Hat.

Fifty-one companies responded to the survey, answering questions such as how much of their budgets are dedicated to Web application security and how those applications were vetted. More than a quarter of the companies that participated generate more than US$1 billion in revenue annually.

The survey doesn't show exactly how much companies spent on Web application security but rather percentages of their budgets dedicated to the area. Other questions gauged how companies feel about the importance of strong Web apps.

The results are mixed, with some responses indicating that companies are more focused on application security. Though more than 25 percent companies expected to spend more on Web application security this year, thirty-six percent said spending would remain flat. Others did not respond.

Half of the companies said security is part of their branding strategy, but 61 percent said that security as a competitive advantage was not a motivation. Forty percent of companies said compliance was the most compelling reason for Web application security spending.

Sixty-one percent said they allow an independent third-party to review applications before deployment, with 17 percent saying they don't. The rest either didn't know or would do it if requested by a customer.

In a sign of how many companies are still catching up, more than third say they don't use a Web application firewall to ensure against intrusions or detect anomalies.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags web applicationssecurity

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Father’s Day Gift Guide

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?