Most computer users misunderstand what we mean when we say “online security.” To the average computer user, security means making sure you have the proper anti-virus software to protect you from viruses, spyware and other malicious software. While this is important for consumers, businesses need to think differently about security. For a business security is about protecting your data – your information. Whether that is client information, project details, internal emails or something entirely different, it would be very harmful to your business to have that information end up in the wrong hands. Fresh Protocol specializes in making sure that your data is secure, giving you and your customers peace of mind.
Penetration Testing
Penetration testing (known as ‘pen-testing’ for short) is used to test your website, network or physical security. These tests involve gathering information as well as attempting to gain access to the target. This approach allows us to go through the motions that a hacker or thief would use to breach your security. If we find any holes, we’re able to show them to you and help you correct them. By taking a proactive approach to your security, we help you ensure that the risk to your business is minimized.
Intrusion Detection & Response
Sometimes intrusions happen, and when they do, its important that you understand how, and why. If you have been hacked, it is important that you take the right steps . We will help you assess how it happened, and what data was compromised. Once we find the point of entry, we work with you to make sure that it is secured properly, and do a thorough check of the server to ensure that there are no additional points of entry. We also identify what information the hacker was able to gain access to, so that you can respond appropriately. This two-pronged approach allows you to regain control of the situation, and ensures that it doesn’t happen again.
But Why Me?
One of the first questions we often hear when helping clients recover from a security breach is, “Why me? My data is not valuable to most people, why was I targeted?”
The truth is, anyone can be a target. Hackers will often look for sites to hack based on a specific security flaw that they are familiar with. Once they find sites with this flaw, they exploit them for no reason other than to be malicious. To better understand this, consider a team of burglars who have figured out a flaw in the alarm systems of one certain company that allows them to turn off the alarm and enter the house without being detected. Because they are able to do this, they drive around town and look for houses that have signs or stickers from that specific alarm company. Similar to burglars targeting houses because they know they can break in undetected, hackers often target websites because they know they can hack them, not because they are of any interest to them.
While it is true that hackers do target high-profile targets such as banks, government websites and large corporations with a specific goal in mind, these security breaches are not the most common (just the most commonly reported on). It is much more common for hackers to get into smaller websites that seem to be of no use to them, either to practice, or sometimes just because they think it is fun.
