全球安全軟件行業(yè)市場前景及投資研究報(bào)告-培訓(xùn)課件外文版2024.4

DIGITAL

&

TRENDSSecuritysoftwareCHAPTER

01OverviewInformationtechnology(IT)worldwidespendingfrom2005to2024(inbillionU.S.dollars)GlobalITspending2005-20246,0005,0004,0003,0002,0001,00002005

2006

2007

2008

2009

2010

2011

2012

2013

2014

2015

2016

2017

2018

2019

2020

2021

2022

2023*

2024*3Description:ITspendingworldwideisprojectedtoreacharound4.6trillionU.S.dollarsin2023,a5.5percentincreaseon2022spending.ReadmoreNote(s):Worldwide;2005to2023;Includesspendingonsoftware,devices,services,datacentersystems,andcommunicationservices;*Forecast

ReadmoreSource(s):GartnerInformationsecurityproductsandservicesmarketrevenueworldwidefrom2011to2023(inbillionU.S.dollars)Totalrevenueglobalinformationsecuritymarket2011-2023200180160140188.1172.5150.41133.78120.93114.15120101.5410082.2375.68060402007267.261.8552011201220132014201520162017201820192020202120222023*4Description:Theinformationsecuritymarkethasincreasedconsiderablyoverthepastyears.In2023,therevenueofthesecuritytechnologyandservicesmarketworldwideisexpectedtopeakat188.1billionU.S.dollars.Informationsecurityreferstothepracticeofmanagingaccesstoinformation,whetherthatissecuringinformationfromunauthorizedaccessorverifyingtheidentityofthosewhoclaimtohaveauthoritytoaccessinformation.Asboththenumberofpossiblethreatsandawareness[...]

ReadmoreNote(s):Worldwide;2011to2023;*Forecast.ReadmoreSource(s):GartnerSizeofthecybersecuritymarketworldwidefrom2020to2030(inbillionU.S.dollars)Cybersecuritymarketrevenuesworldwide2020-2030600500400300538.3407.9296.1217.92001000202020222027*2030*5Description:Theglobalcybersecuritymarketsizeisforecasttogrowto538.3billionU.S.dollarsby2030.Cybersecurityisthepracticeofprotectingcomputerinformationsystems,hardware,network,anddatafromcyberattacks.Anincreasingawarenessofcyberthreatsleadtoarisinginvestmentincybersecurityinfrastructureworldwide.ReadmoreNote(s):Worldwide;2021to2027;*Forecast2022-2030CAGR:7.8%ReadmoreSource(s):GlobeNewswire;ResearchandMarkets;VarioussourcesRevenuefromadvancedpersistentthreat(APT)protectionmarketworldwidefrom2015to2027(inbillionU.S.dollars)Advancedpersistentthreatglobalmarketsize2015-2027201816141218.6515.1612.3410.1108.2886.95.9164205.24.393.793.22.641.95201520162017201820192020202120222023*2024*2025*2026*2027*6Description:By2027,theadvancedpersistentthreatprotectionmarketwasforecasttoexceed18.6billionU.S.dollars.Anadvancedpersistentthreat(APT)isastealthythreatactorwhichgainsaccesstoacomputernetworkunauthorized.Theobjectiveofthethreatactoristocausedamagetotheorganizationand/orgaininformationbystealing,spying,ordisrupting.BecauseanAPTattackusuallygoesundetectedforanextendedperiodoftime,theattackershaveenoughtimetogothroughtheattack[...]

ReadmoreNote(s):Worldwide;2015to2023;*Forecast.Figureshavebeenrounded.ReadmoreSource(s):TheRadicatiGroupPubliccloudmanagementandsecurityservicesend-userspendingworldwidefrom2015to2024(inbillionU.S.dollars)Publiccloudmanagementandsecurityservicesmarketsize2015-20246050403051.8742.434.4926.6722.72010012.810.58.77.15201520162017201820192020202120222023*2024*7Description:Thestatisticshowsaforecastforthepubliccloudmanagementandsecurityservicesmarketfrom2015to2023.In2023,thepubliccloudmanagementandsecuritymarketwasexpectedtobeworth42.4billionU.S.dollars.

ReadmoreNote(s):Worldwide;2015to2023;*ForecastReadmoreSource(s):GartnerCHAPTER

02SegmentsInformationsecurityspendingworldwidefrom2017to2024,bysegment(inmillionU.S.dollars)Totalspendingonglobalinformationsecuritymarket2017-2024,bysegmentApplicationsecurityIdentityaccessmanagementSecurityservicesCloudsecurityInfrastructureprotectionConsumersecuritysoftwareDataprivacyIntegratedriskmanagementDatasecurityNetworksecurityequipment250,000200,000150,000100,00050,000020172018201920202021202220232024*9Description:Globalspendingoninformationsecurityhasbeengrowingfrom2017to2023,increasingfromjustunder100billionU.S.dollarsin2017toalmost200billionU.S.dollarsin2023.Mostspendinghasconcentratedinsecurityservices,infrastructureprotection,andnetworksecurityequipment.Spendingonsecurityservicesisexpectedtoreachnearly90billionU.S.dollarsby2024.ReadmoreNote(s):Worldwide;2017to2023;*ForecastReadmoreSource(s):GartnerITsecurityspendinggrowthrateworldwidein2024,bysegmentGlobalITsecurityspendinggrowth2024,bysegmentAnnualgrowthrate0%5%10%15%20%25%24.7%24.6%30%CloudsecurityDataprivacyInfrastructureprotectionDatasecurity17.5%17.4%Applicationsecurity15.7%14.8%13.9%IdentityaccessmanagementNetworksecurityequipmentSecurityservices11.3%10.4%IntegratedriskmanagementConsumersecuritysoftwareOtherinformationsecuritysoftware6.4%26.4%10Description:Accordingtothesource,cloudsecuritywasexpectedtogrowbynearly25percentfrom2023to2024,makingitthefastestgrowingsegmentintheITsecuritymarket,largelyduetothegrowingdemandforcloudsolutionsasanincreasingnumberofcompaniesmigratetothecloud.Overall,thesourceexpectsthetotalITsecurityspendingtoincrease14.3percentin2024comparedto2023.ReadmoreNote(s):Worldwide;2023Source(s):GartnerSecuritysoftwarerevenueworldwidefrom2009to2022(inbillionU.S.dollars)Securitysoftwareglobalmarketrevenue2009-20227060504061.450.149.743.236.332.13023.622.121.42201420.35201319.1417.7420112010016.47201014.71200920122015201620172018201920202021*202211Description:Theglobalsecuritysoftwarerevenuemarketpeakedatover61billionU.S.dollarsin2022.Thisrepresentedanincreaseof22.5percentcomparedtothepreviousyear.

ReadmoreNote(s):Worldwide;2009to2022;*Themarketrevenuevaluefor2021wascalculatedbySource(s):Gartnerbasedonthesecuritysoftwaremarketgrowthratefrom2021to2022thatwasprovidedbythesource.

ReadmoreSecuritysoftwarerevenuegrowthworldwidefrom2010to2022Globalrevenuegrowthofthesecuritysoftwaremarket2010-202225%20%22.5%15%10%5%13.9%12%10.3%10.1%9.7%20188.2%20167.87%20127.5%20115.3%20144.9%20133.7%20150.8%20210%2010201720192020202212Description:Thestatisticshowstheyear-over-yeargrowthoftheglobalsecuritysoftwaremarketfrom2010to2022.In2022,theglobalsecuritysoftwaremarketgrewby22.5percent,peakingatmorethan61billionU.S.dollars.

ReadmoreNote(s):Worldwide;2009to2022Source(s):GartnerForecastrevenuefromendpointsecuritymarketworldwidefrom2022to2027(inmillionU.S.dollars)Endpointsecuritymarketsizeworldwide2022-202735,00030,00025,00020,00029,75224,18819,82616,25115,00010,0005,000013,43111,19220222023*2024*2025*2026*2027*13Description:Theglobalendpointsecuritymarketisprojectedtoreach13.4billionU.S.dollarsin2023.Themarketisprojectedtocontinuegrowing,amountingtomorethan29billionU.S.dollarsin2027.ReadmoreNote(s):Worldwide;2022to2027;*ForecastReadmoreSource(s):TheRadicatiGroupCHAPTER

03CompaniesNortonLifeLock'snetrevenuefrom2007to2023(inmillionU.S.dollars)NortonLifeLock:netrevenue2007-20238,0006,9066,7307,0006,0005,0004,0003,0002,0001,00006,6766,1506,1905,9855,8745,1994,8464,7314,0193,9563,6003,3382,79620222,55120212,490200720082009201020112012201320142015*201620172018

2019**

2020202315Description:ThenetrevenuegeneratedbytheU.S.softwarecompany,NortonLifeLock,formerlySymantec,hasincreasedfromthefiscalyear2007to2023.NortonLifeLocksolditsEnterpriseSecuritysoftwaredivisionin2019toBroadcomInc.Itsrevenueinfiscalyear2022stoodat3.3billionU.S.dollars.ReadmoreNote(s):Worldwide;2007to2023;*InJanuary2016,Symantecfinalizedthedivestmentoftheirinformationmanagementdivision,nowcalledVeritasTechnologiesCorporation,tofocussolelyoncybersecurity.Thehistoricalfinancialinformation[...]

ReadmoreSource(s):NortonLifeLockNetsalesofTrendMicroInc.fromfiscalyear2014to2023(inbillionJapaneseyen)TrendMicro'snetsalesFY2014-2023300250200248.69223.8190.36174.06165.2160.41148.81150131.94124.32115.21100500201420152016201720182019202020212022202316Description:ThenetsalesofTrendMicroInc.reachedavalueof248.7billionJapaneseyeninfiscalyear2023,upfromaround224billionyeninthepreviousyear.TrendMicroisamultinationalcybersecuritycompanyheadquarteredinTokyo.

ReadmoreNote(s):Japan;fiscalyear2014to2023;thecompany'sfiscalyearstartsonJanuary1ofthestatedyearandendsonDecember31ofthesameyearSource(s):TrendMicroRevenueofBitdefenderfrom2006to2022(inmillionRomanianlei)RevenueofBitdefender2006-20221,6001,4001,2001,458.861,084.551,0008006004002000869.07671.31591.92017545.94453.172016387.042015251.522014196.512013160.942012135.612011122104.8200964.822.10.920062007200820102018201920202021202217Description:BitdefenderisaRomaniancybersecuritytechcompanyfoundedin2001.Apartfromitsanti-malwaresoftware,thecompanyalsodevelopscybersecurityproductsandservices,aswellasendpointprotectionandcloudandIoTsecurity.Thecompany'srevenueconstantlyincreased,reachingaround1.46billionRomanianleiasof2022.Thisrepresentedtheequivalentofaround295.8millioneuros.ReadmoreNote(s):Romania;2011to2022Source(s):BitDefender;MinistryofPublicFinancesRomania;RisCoBusinessIntelligenceCrowdStrike'stotalglobalrevenuefromFY2017toFY2023(inmillionU.S.dollars)TotalglobalrevenueofCrowdStrike2017-20232,5002,0001,5001,0005002,241.231,451.59874.44481.412020249.822019118.7552.7520170201820212022202318Description:CrowdStrikeHoldings,Inc.,anAmericancybersecuritytechnologythatprovidesendpointsecurity,cloudsecurity,andITsolutions,hasseenatremendousincreaseinitsrevenuebetweenthefiscalyears2017and2023.Inthe2017fiscalyear,CrowdStrike'srevenuewasonly52.75millionU.S.dollars,whereasin2023,thecompanypeakeditsrevenueataround2.2billionU.S.dollars.ReadmoreNote(s):Worldwide;2017to2023Source(s):CrowdStrikeRevenueofPalantirTechnologiesInc.from2008to2023(inmillionU.S.dollars)PalantirTechnologies'revenue2008-20232,5002,0001,5001,0005002,225.011,905.871,541.891,092.67742.562019595.412018515466364235177132723716202008200920102011201220132014201520162017202020212022202319Description:PalantirTechnologiesInc.isasoftwarecompanyspecializinginbigdataanalytics.ItsnameisderivedfromJ.R.R.Tolkien`sMiddleEarthuniverse,specificallyTheLordoftheRings.In2020,theAmericancompanyrakedinmorethanonebillionU.S.dollarsinrevenueforthefirsttime,whichincreasedto2.2billionU.S.dollarsin2023.ReadmoreNote(s):UnitedStates;2008to2023Source(s):PalantirMarketshareheldbytheleadingWindowsanti-malwareapplicationvendorsworldwidefromDecember2022toMay2023GlobalmarketshareheldbyWindowsanti-malwarevendors2022-2023,bymonthSymantecEndpointProtectionNortonInternetSecurityNorton360NortonSecuritywithBackupNortonSecurityScanNortonAntivirusNortonSecurity78%90%80%70%60%50%40%30%20%10%0%79%79%78%77%75%17%15%3%15%15%14%14%3%3%3%3%3%2%2%2%2%2%1%1%1%1%1%0%0%0%-10%Dec'22Jan'23Feb'23Mar'23Apr'23May'2320Description:SymantecCorporationheld77percentoftheWindowsanti-malwareapplicationmarketasofMay2023,morethananyothervendor.ItwasfollowedbyNorton360,withamarketshareof15percent.In2019,SymantecsolditsEnterpriseSecuritysoftwaredivisiontoBroadcomandrenamedtheremainingbusinesstoNortonLifeLock.ReadmoreNote(s):Worldwide;December2022

toMay2023Source(s):OPSWATCHAPTER

04ConsumptionAverageannualincreaseinorganizations'ITsecuritybudgetsworldwidefrom2018to2023Averageannualincreaseinglobalcompanies'ITsecuritybudgets2018-20236%5.3%5%4.9%5%4%3%2%1%0%4.7%4.6%4%20182019202020212022202322Description:In2023,theaverageannualincreaseincompanies'ITsecuritybudgetsisexpectedtopeakat5.3percent,upfrom4.6percentin2022.ReadmoreNote(s):Worldwide;November2022;1,200respondents;RespondentswhohaveanITsecurityjobroleinanorganizationwithmorethan500employeesSource(s):CyberEdge;ISC2EmergingITsecuritytechnologiesandarchitecturesworldwidein2023,bydeploymentstatusGlobalemergingITsecuritytechnologiesandarchitectures2023,bydeploymentstatusShareofrespondentsImplmentationinprogress

Implementationtobeginsoon20%

40%Currentlyinproduction0%Noplans80%60%100%7.7%120%Zerotrustnetworkaccess(ZTNA)45.3%31.4%15.7%14.3%16.8%Hardware-based/firmwaresecurityRisk-basedvulnerabilitymanagement(RBVM)Passwordlessauthentication43.5%35.1%7.1%7.4%39.7%36.2%39.3%39.1%37.8%31.1%17.8%11.8%Extendeddetectionandresponse(XDR)Secureaccessserviceedge(SASE)35%18.6%7.3%6.6%40.3%15.4%23Description:AsofNovember2022,theemergingITsecuritytechnologyimplementedthemostbycompaniesworldwidewaszerotrustnetworkaccess(ZTNA).Moreover,40.3percentofrespondentsstatedthattheircompanywascurrentlyintheprocessofimplementingsecureaccessserviceedge(SASE),while18.6percentofrespondentswerepreparingtoimplementanextendeddetectionandresponse(XDR)system.

ReadmoreNote(s):Worldwide;November2022;1,200respondents;RespondentswhohaveanITsecurityjobroleinanorganizationwithmorethan500employeesSource(s):CyberEdge;ISC2Anti-malwaresoftwarethatensurethebestprotectionagainstinfectionsworldwidein2022,bycybersecurityprovider*Softwarewiththebestprotectionagainstinfectionsworldwide2022,byprovider75.945.925.8665432105.32BitdefenderKasperskyNortonMcAfee24Description:Whenitcomestoanti-malwaresoftware,Bitdefenderwasthecybersecurityproviderthatguaranteedthebestprotectionagainstinfections.ItwascloselyfollowedbyKaspersky,withascoreof5.92.BitdefenderisaRomaniancybersecuritytechcompanyfoundedin2001.Apartfromitsanti-malwaresoftware,thecompanyalsodevelopscybersecurityproductsandservices,aswellasendpointprotectionandcloudandIoTsecurity.

ReadmoreNote(s):Worldwide;2022;*Bestprotectiononascalefrom0to6,where6representsthehighestscoreReadmoreSource(s):BitDefenderAreyoucurrentlyusingorplanningtouseaSaaSSecurityManagement(SSPM)platform?UseandimplementationplansofSSPMworldwide202350%44%45%40%35%30%25%20%15%10%5%36%19%0%CurrentlyusingPlantouseinthenext18monthsNocurrentplans25Description:In2023,whenaskedabouttheircurrentsuseorimplementationplansofSaaSSecurityPostureManagement(SSPM)intheircompanies,80percentofrespondentsstatedcurrentlyusingorplanningtouseitinthenext18months.Ontheotherhand,only19percentofrespondentsworldwidereportedhavingnoplansusingorimplementingSSPM.ReadmoreNote(s):Worldwide;March2023;1,130respondents;ITandsecurityprofessionalsSource(s):AdaptiveShield;CloudSecurityAllianceMostimportantsoftwareweaknessesdiscoveredthroughstaticanalysisworldwidein2022Globalsoftwareweaknessesdiscoveredbystaticanalysis2022Shareofsoftwareflaws20%

30%0%10%40%50%60%70%CRLFInjectionCryptographicIssueInformationLeakageCodeQuality64.8%59.8%59.3%55.6%CredentialsManagementDirectoryTraversalInsufficientInputValidationCross-SiteScripting(XSS)SQLInjection46.7%41.7%41.6%38.5%22.5%19.9%19.2%EncapsulationAuthenticationIssueTimeandState14%CommandorArgumentInjectionServerConfigurationAPIAbuse11.3%11.1%10%26Description:In2022,themostimportantsoftwareweaknessdiscoveredthroughstaticanalysisofalldevelopmentlanguagesworldwidewasfoundtobeinCRLFinjection,representingnearly65percentoftheflaws.Cryptographicissuesandinformationleakageconstitutedothercommonlydiscoveredflaws,reachingeacharound60percentoftheflaws.Staticanalysisisamethodofcomputerprogramdebugging,completedbyexaminingthecodewithoutexecutingtheprogram.Thisisthereasonswhy[...]

ReadmoreNote(s):Worldwide;2022Source(s):VeracodeMostimportantsoftwareweaknessesdiscoveredthroughdynamicanalysisworldwidein2022Globalsoftwareweaknessesdiscoveredbydynamicanalysis2022Shareofsoftwareflaws30%

40%

50%0%10%20%60%70%80%90%100%110%ServerConfigurationInsecureDependenciesInformationLeakageCryptographicIssuesEncapsulation96.5%75.1%71.4%58.1%57.5%AuthenticationIssuesDeploymentConfigurationSessionFixationCross-SiteScripting(XSS)CodeInjection53.5%40.4%11%10.2%9.1%7.7%SQLInjectionCodeQuality6.9%6.3%CredentialsManagementCommandorArgumentInjectionDirectoryTraversal1.9%1.8%27Description:In2022,themostimportantsoftwareweaknessdiscoveredthroughdynamicanalysisofalldevelopmentlanguagesworldwidewasfoundtobeinserverconfiguration,representingmorethan96percentoftheflaws.Atthesametime,over75percentand71percentofflawswerefoundininsecuredependenciesandinformationleakage,respectively.Dynamicanalysisrepresentsthetestingandevaluationofaprogrambyexecutingit,withthepurposeoffindingerrorswhilerunning.

ReadmoreNote(s):Worldwide;2022Source(s):VeracodeMostimportantsoftwareweaknessesdiscoveredthoughsoftwarecompositionanalysis(SCA)in2022GlobalsoftwareweaknessesdiscoveredbySCA2022Shareofsoftwareflaws20%

30%0%10%40%50%60%70%InformationLeakageInsufficientInputValidationEncapsulation66.6%62.8%60.4%CodeInjection56.7%DirectoryTraversal52.5%50.6%48.1%BufferManagementErrorsCryptographicIssuesCross-SiteScripting(XSS)AuthenticationIssuesDeploymentConfigurationNumericErrors44.7%42.8%36.3%32.5%32.4%32.1%32%CommandorArgumentInjectionSQLInjectionRaceConditions28Description:In2022,themostimportantsoftwareweaknessdiscoveredthroughsoftwarecompositionanalysisofalldevelopmentlanguagesworldwidewasfoundtobeininformationleakage,representingmorethan66percentoftheflaws.Othersignificantweaknesseswerediscoveredininsufficientinputvalidationandencapsulation.Softwarecompositionanalysisisanautomatedprocessthatidentifiestheopensourcesoftwareinacodebase,inordertoevaluatesecurity,licensecomplianceand[...]

ReadmoreNote(s):Worldwide;2022Source(s):VeracodeCHAPTER

05Specialfocus:Open-sourcesoftwaresecurityinGermanyWhatisthemostsignificantadvantageofusingopensourcesoftware(OSS)inyourcompany?AdvantagesofusingOSSforGermancompanies2023Shareofrespondents0%5%10%15%20%25%30%35%40%Costsavings35%Sourcecodeaccess16%EasytocustomizetospecificrequirementsSimplechangeofprovider7%6%Increaseddigitralsovereignty4%BettercompatibilityandinteroperabilitybetweentoolsandcomponentsFromavarietyofOSSproviderswithcommercialsupportWiderangeofOSScomponents3%3%3%Supportforopenstandards2%Promotionofinnovation4%WideandactivecommunityforknowledgeIncreasedsecuritywithtimelyupdatesHighstabilityandlowsusceptibilitytoerrosThereisnoadvantage2%3%1%10%30Description:In2023,themostsignificantadvantageofusingopensourcesoftware(OSS)forGermancompanieswascostsavings,highlightedby35percentofrespondents.Atthesametime,16percentofrespondentsconsideredsourcecodeaccessanotherimportantbenefitofusingOSS.Ontheotherhand,onlyfourpercentofrespondentssawOSSuseasafactorforincreasedsecuritywithintheircompany.ReadmoreNote(s):Germany;March2023toMay2023;1,155respondents;Germancompaniesfromdifferentsizecategoriesandindustriesemployingatleast20people.Source(s):Bitkom;PwCWhatisthemostsignificantdisadvantageofusingopensourcesoftware(OSS)inyourcompany?DisadvantagesofusingOSSforcompaniesinGermany2023Shareofrespondents4%

6%0%2%8%10%12%14%16%LackofOSSprofessionalsLegaluncertaintiesregardinglicensingobligationsHightrainingandfamiliarizationcostsUnclearwarrantysituationorsupplierliabilityLackofcommercialsupport14%14%8%8%8%Securityaspects7%ThereisnodisadvantageLowstabilityorhigherrorsusceptibilityLackofOSScertification6%6%6%UndulyabundantchoiceofOSSSwitchtoOSScostly5%5%UncertainfutureofOSSLackoftrainingopportunities3%3%31Description:In2023,themostsignificantdisadvantagesofusingopensourcesoftware(OSS)forGermancompanieswerethelackofOSSprofessionalsandlegaluncertaintiesregardinglicensingobligations,eachhighlightedby14percentofrespondents.Atthesametime,onlysevenpercentofrespondentssawtheuseOSSwithintheircompanyaspresentingsecurityrisks.ReadmoreNote(s):Germany;March2023toMay2023;1,155respondents;Germancompaniesfromdifferentsizecategoriesandindustriesemployingatleast20people.Source(s):Bitkom;PwCWhatapproachdoyoutaketocheckthesecurityofyouropensourcesoftware(OSS)componentsinyourcompany?MaintoolsusedbyGermancompaniestocheckthesecurityofOSScomponents2023Shareofrespondents0%5%10%15%20%25%30%35%40%40%45%WecheckmanuallywithoutanalytictoolsWecheckwithanalytictools33%Thecommercialprovidersoft