The 2005 CSI/FBI Computer Crime and Security Survey has been released. The study indicates that computer virus attacks present the greatest financial losses but conversely reveals that financial losses from cybercrime are decreasing while Web site attacks have risen dramatically. Victims continue to be reluctant to involve law enforcement. According to the survey, "The key reason cited for not reporting intrusions to law enforcement is the concern for negative publicity."

The financial sector, high-tech, and government agencies comprise the largest sectors of respondents. The 2005 CSI/FBI Computer Crime and Security Survey analyzes long-term trends, including:

• Unauthorized use of computer systems
• The number of incidents
• Types of attacks
• Type of response to the intrusions

Survey respondents revealed that outsourcing security remains flat and cybersecurity insurance may be in decline. In both the 2004 and 2005 surveys, "63 percent of respondents indicated that their organizations do no outsourcing of the security function." In 2004, 28 percent reported the use of cybersecurity insurance, compared to 25 percent in 2005.
This may be due to an overall decline in the number of reported computer security incidents. The 2005 survey reveals that, "The percentage of respondents estimating that their firm experienced more than 10 computer security incidents reached the lowest level for all categories (total incidents, incidents originating from outside and incidents originating from inside), since 1998." Of the reported incidents, equal numbers came from inside attacks as from outside attacks.

Viruses, unauthorized access, and theft of proprietary information topped the list of reported financial losses. Viruses led the list at $42,787,767, with unauthorized access losses reported at $31,233,100 and theft of proprietary info at $30,933,000.

The complete 2005 CSI/FBI Computer Crime and Security Survey can be downloaded at http://www.gocsi.com/forms/fbi/csi_fbi_survey.jhtml.