"We are at risk. Computers are vulnerable to the effects of poor design, insufficient quality control, accident and, perhaps more alarmingly, to deliberate attack." -- Computers at Risk, Computer Science and Telecommunications Board, National Research Council, 1991.

The new ground zero in Internet warfare

Now, 18 years later, we are still at risk. Our computers are still vulnerable. They still suffer attacks enabled by poor design and insufficient quality control. We spend huge sums on IT security, yet U.S. companies and individuals are loosing tens of billions of dollars annually to cybercrime.

In January, Heartland Payment Systems Inc. reported what may be the largest data heist ever.

The company said that a "global cyberfraud operation" stole information from more than 100 million credit cardholders. Someone had planted a software "sniffer" in a Heartland server disk, where it apparently nosed around undetected for weeks.

These mega-breaches make big news and cause their victims big pain. But they are just the tip of a huge cybercrime iceberg. Last September, Gartner Inc. published a chilling case study about The Procter & Gamble Co. , a business known for its sophistication in IT and one with a robust deployment of firewall, intrusion detection and antivirus software tools.

P&G conducted a six-month worldwide audit of its PCs to see if any were infected by hidden software robots, or bots, which can connect into botnets secretly controlled by external parties. Using special sensor software, P&G discovered that some 3,000 of its 80,000 PCs were infected with botnet clients. These bots were attempting to communicate with a dozen remote-control sites, with about 20% of those attempts getting through P&G security measures.

But that's not all. P&G scrubbed the offending bots by re-imaging the PCs, a laborious process of removing and reinstalling all the software including the operating system. According to Gartner, however, many PCs became reinfected immediately when backed-up user data that contained hidden executables was restored to the re-imaged machines.

In the past 18 years there have been amazing advancements in every facet of IT -- in networks, processors, memories, disks, languages, applications, development methods and security tools. Yet technology clearly has not turned the tide of war with cyber criminals.

For more enterprise computing news, visit Computerworld. Story copyright Computerworld, Inc.