Linux wins on security in survey of 6,000+ software developers

A poll of 6,000+ software developers released today shows that Linux
consistently tops Microsoft Windows in terms of security. The full survey
results will be given today (Tuesday, April 12) at the Software Security
Summit in San Diego, CA.

Linux More Secure Than Windows, National Survey Shows

BZ Research survey of 6,344 software development managers shows Linux
superior to Windows for operating system and application-level security
attacks

SOFTWARE SECURITY SUMMIT, LA JOLLA, Calif.   April 12, 2005   In its first
annual Security Issues Survey for the debut of the Software Security Summit
conference in La Jolla, California, BZ Research polled 6,344 software
development managers about the security of different popular enterprise
operating environments and Linux and open source consistently topped
Microsoft Windows, according to respondents. 

Summary findings of the initial results will be presented today at the
Software Security Summit by conference chairman Alan Zeichick. The summit
features more than 30 sessions and speakers, including keynote
presentations by Mary Ann Davidson, Chief Security Officer for Oracle
Corporation, Amit Yoran, former cyber chief in the Department of Homeland
Security, and James A. Whittaker, noted author of books on security and
Chief Scientist at Security Innovation, Inc.

The Security Issues Survey initial findings showed software managers
consistently ranked Linux more secure than Windows, with client operating
systems and applications seen as most susceptible to security exploits. The
survey also explored the use of security vulnerability assessment and
testing tools, with most respondents saying their organizations don't do
enough testing and that they plan to do more. The margin of error for the
survey is 2.5 percentage points.

Asked to rate the security of server operating environments against
operating system related hacks and exploits, Windows Server fared worst by
far. Some 58% rated Windows Server very insecure or insecure versus 13% for
Linux. Sun Solaris fared best, with only 6% rating the operating system
very insecure or insecure. On the positive side, some 74% of respondents
rated Linux secure or very secure versus only 38% for Windows Server. Sun
Solaris was rated secure or very secure by 66%.

Asked about the security of operating systems against application-related
hacks and exploits, Windows Server was again rated least secure. Some 58%
of respondents rated Windows Server as very insecure or insecure versus 18%
for Linux. On the other hand, Linux was deemed secure or very secure by 66%
of respondents versus only 30% for Windows Server.

When queried about comparing the security of open source versus proprietary
software in eight categories, open source was the clear winner in four of
the categories: desktop/client operating systems (44% to 17%); Web servers
(43% to 14%); server operating systems (38% to 22%); and components and
libraries (34% to 18%).

Proprietary software was said to be more secure than open source in only
one category, database servers (34% to 21%). Results were statistically the
same in three categories: desktop/client applications, server applications
and application servers.


About Software Security Summit
Software Security Summit, produced by BZ Media, is the premier event for
the software security industry. The summit brings together the industry's
leading experts to help development managers, software architects,
applications programmers, and other IT professionals understand the
specific security weaknesses in their software infrastructure. The debut
summit will be held April 12-14, 2005, at the Hyatt Regency La Jolla, in
San Diego, Calif. For more information, visit http://www.S-3con.com.

###

Editorial Contact:

Lonn Johnston
Page One PR for Software Security Summit			
+1.650.565.9800 x101			
lonn@pageonepr.com

Note: you can avoid this step in the future by logging into your LWN account.