Flipping the Economics of Attacks

1. When Do Adversaries Call it Quits?
The additional time to deter the majority of attacks is less than two days.
The Myth of the Big Payout
Many attackers are motivated by economics, but actual earnings reveal a different reality.
Does Crime Pay?
Purely Economics
Attackers say they are
motivated by earning potential.
Excellent IT Security Deters Adversaries 4 Days Past Their “Change Target” Point
The average attacker only makes one quarter
of what IT security pros make each year.
Changing the Economics of Attacks
Excellent IT Security doubles the time attackers need to plan and execute a successful attack
The Path Forward? Sharing Threat Intelligence
Sharing threat intelligence with peers is considered most effective for preventing attacks
Read the full report: go.paloaltonetworks.com/ponemon
69%
25%
Choosing Targets
Most adversaries choose
targets opportunistically
72%
39%
Attacks Can Be Thwarted
by threat intelligence sharing
$28,744/annual earnings
70hours
147hours
i i
Your Adversaries IT Security Professionals
Attack on Typical IT Security
Attack on Excellent IT Security
$115,770/annual earnings
60%
of attacks
deterred
40hours hours hours hours
20
36%
of attacks
deterred
10
24%
of attacks
deterred
5
13%
of attacks
deterred
THE REAL COST
OF ATTACKS
Prevent successful breaches by impacting attacker ROI.