ArcSight's namesake product, Open Service Security Threat Manager, and Qualys QualysGuard are among products highlighted in a discussion of the results of the InformationWeek Research 2004 Global Information Security Survey. Spokespeople for users and vendors also comment on their efforts to protect company systems from viruses and worms, which are a growing problem. A research firm has estimated the 2003 cost of virus and worm attacks at $12.5 billion globally. Companies are experiencing longer downtime, and a third of survey respondents believe that software vendors should be held legally and financially responsible for security vulnerabilities in their products. The manager of information security for a law firm says many security tools are either insufficient, flawed, or do not communicate well, and an executive for a government-owned power utility says business technology managers have become very focal regarding their strong concerns over security. Another user says some security tools are insecure as shipped, and that many security professionals are using multiple layers of security and often add new types of tools to guard their systems. They are also trying to increase their understanding of the security threats that are most serious and have to be addressed quickly. Users often want information that security tools do not provide, rather than floods of warnings about the need for patches, even though the use of such systems is not being taken into consideration. Among survey statistics highlighted are those for vendor views regarding assignment of responsibility in the event vulnerabilities in their products, spending plans, tactical security priorities for the next 12 months, and effects of attacks on companies.