Data Center Journal

Volume 32 | June 2014

Issue link: https://cp.revolio.com/i/324708

Contents of this Issue

Navigation

Page 19 of 32

www.datacenterjournal.com seVen steps to stay aheaD of heartBleeD IDCs, Cloud hosting facilities, ISPs and other websites that host highly sen- sitive data, now more than ever, need to implement additional risk controls and take this opportunity to educate users on best practices to manage this vulnerability. Below are seven ways you can help safeguard your brand and keep customers informed: take appropriate actions: Apply further risk controls; including continuous checks on the IP login address, stricter capital monitoring and tighter oversight to flag abnormal operations. update and protect: Update your customers of any abnormal- ity detected on affected websites so that appropriate passwords can be updated. Provide them with detailed information on Internet security before and aer attacks occur. Make use of secure channels: Notify customers via secure channels such as the user's registered email address, or previous email ad- dress in the event that modifications of the original are detected. Become the security expert: Equip your customers with best practices such as advising them to avoid logging into accounts on affected web- sites until they are sure the breach has been resolved. Confirm vulnerability: e in- stinctive response of many users will be to immediately modify their passwords, but they should hold off till it is confirmed that the affected website has been repaired. Be proactive: Because attackers can steal financial data stored in the server memory, guide users to change passwords for especially sensi- tive accounts, such as online banking and personal email accounts and to be on the look out for any discrepancies. test for security: Users and providers can visit http://filippo. io/Heartbleed/ to check if a website is still exposed to this vulnerability. Users can also install the associated browser plug-ins. For Firefox browser, you can install the FoxBleed plug-ins, while Chromebleed plug-ins can be installed in Chrome browser. ese plug-ins can provide alert/warning information when you visit the websites. new reVenue opportunities – BeCoMing a ManageD seCurity serViCe proViDer Protecting your business as well as customers is of paramount impor- tance to organizations, large or small. Competition is at an all time high and protecting reputations is of paramount importance to all organizations. Data centers and hosting providers are not excluded. ey are tasked with protect- ing their own brand, as well as customer assets. Today, there are solutions that can be integrated into existing service offer- ings. Hosting providers, ISPs and IDCs can implement solutions to provide net- work security as part of their services, such as becoming a "Scrubbing Center" to help them lessen the effects of events such as Heartbleed and DDoS attacks while increasing their bottom line. By initiating new policies to im- prove the customer experience, hosting providers are better equipped to protect tangible and intangible assets, perhaps even generating additional revenue streams simultaneously. n about the author: Liejun Wang, Senior Researcher, Core Technology Division for NSFOCUS has over 14 years of experience in the network security field, Wang is dedicated and specialized in vulnerability analysis, intrusion prevention and detection, and vulnerability assessment related to core network security, attack analysis and defense technology. Wang provides ongoing and continuous security consulting and support for the Intrusion Prevention System (IPS) and remote security assessment products at NSFOCUS. To keep your facility running 24/7, you must be alerted immediately to the faintest traces of smoke – the first indication of system trouble. FAAST Fire Alarm Aspiration Sensing Technology ® from System Sensor provides very early warning of smoke, so you can respond to potential problems before disaster strikes. With FAAST, you can be the first responder. System Sensor is the world leader in smoke detection. To learn more about our award- winning FAAST aspirating smoke detector, visit: ©2014 System Sensor. All Rights Reserved. No fire. No damage. No downtime. go.systemsensor.com/ faast-dcj

Articles in this issue

Links on this page

Archives of this issue

view archives of Data Center Journal - Volume 32 | June 2014