Preventing Network Attacks
Cyber attacks can cause serious damage to a business network in minutes, whether that be through ransomware, data being stolen or services going down. However, most attacks take advantage of simple weaknesses in a company’s protection. With just a few changes to current protection, a business can become a lot more difficult for attackers to target. Here is an essential protection checklist.
Strong passwords and multi-factor authentication
Weak and reused passwords are one of the easiest ways in for an attacker. The UK’s National Cyber Security Centre says long passwords of three random words are better than short complicated passwords. Use a different password on each account that you consider important and use a password manager to help you remember them. But the most important setting to turn on is multi-factor authentication on email accounts, and on accounts that you access from elsewhere, your finance accounts, and your admin accounts. This means that even if your password is stolen by an attacker, it will not be enough to gain access.
Keep software updated
Those annoying update notifications often fix security weaknesses that attackers actively look for. Turn on automatic updates for operating systems, browsers, security software and apps, and replace devices and software that no longer receive updates. Running unsupported software is like leaving a door unlocked. For a trusted Barracuda Partner, visit www.primesys.co.uk/partnerships/barracuda/
Install and configure firewalls
Like digital bouncers, firewalls prevent suspicious traffic from reaching your network.
Edge of network firewalls should be configured and properly managed. Also, individual host firewalls should be enabled and parameters set. Furthermore, changing default passwords for firewalls and routers as well as closing all services that do not need to be reachable from the internet should be undertaken. Companies hosting critical websites and services online can also opt for DDoS protection services to keep them available if attackers flood them with traffic.
Train your staff
Many attacks start with a person rather than a machine. Employees should be trained to recognise phishing emails, suspicious links and social engineering scams such as someone claiming to be from IT calling the user. Employees can be a strong line of defence if they have regular short awareness sessions and a simple way to report anything suspicious. Also let them know that reporting a mistake quickly is always going to be the right thing to do.
Monitor network activity
Unusual traffic, unknown devices, unexpected files or logins at unusual times or from unusual locations can all indicate problems that need to be sorted out as quickly as possible. Many security tools provide alerts for such activity.
Back up and plan for the worst
Back up important data on a regular basis. Make sure you have at least one copy of the data and that it is stored on a separate system from the rest of your network, so ransomware cannot reach it. Test your ability to restore data from backups. Develop an incident response plan and make sure it is easy to follow.
Professional security reviews
Regular security testing will expose weaknesses before the attacker does. Engage with relevant specialists to test out your current infrastructure and then suggest any changes needed to strengthen your security. The Cyber Essentials scheme provides a starting point for a number of basic security measures to protect against commonly seen types of attacks, backed by the UK government.
Network security checklist
| Control | Why it matters |
|---|---|
| Multi-factor authentication | Stops stolen passwords being enough |
| Automatic updates | Closes known security holes quickly |
| Configured firewalls | Blocks unwanted traffic |
| Staff training | Reduces successful phishing |
| Separate, tested backups | Lets you recover from ransomware |
| Monitoring | Spots attacks early |
Frequently asked questions
Where should a small business start with cyber security?
Start with the basics: multi-factor authentication, updates, backups and staff awareness. The National Cyber Security Centre’s small business guide sets out practical, low-cost steps in plain English.
What is a DDoS attack?
A Distributed Denial of Service (DDoS) attack is when massive amounts of traffic from various locations are directed at a website or network to attempt to slow it down or bring a service down completely. A DDoS protection service will scrub the attacking traffic from your site so that legitimate traffic can reach it.
Where to go next
New employees are a common target. Read our checklist for new starters and cyber security.
The cost of preventing an attack is far lower than the cost of recovering from one.
Lessons from the WannaCry ransomware outbreak
The WannaCry ransomware attack hit organisations in more than 100 countries and showed what happens when systems are left unmaintained. One of the most high profile victims was the NHS, where around one in 20 computers was found to be running Windows XP, an operating system Microsoft no longer supported. Those machines had no protection against the flaw the attack exploited.
Part of the problem is that good prevention is invisible. When security works, nothing happens, so it can look like an easy saving when budgets are tight. That is exactly when corners get cut on updates, supported operating systems and backups.
Keeping backups that are disconnected from the main system is one of the simplest defences against ransomware, because encrypted files can be restored without paying. Many businesses also use endpoint management tools, which let IT staff see and update every machine on the network quickly and recover faster if an attack does get through.
