Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Network Security

// // //
07:40 PM
Arlen Free
Arlen Free
News Analysis-Security Now

Small Businesses Need Secure ISPs

Small businesses can't do it alone: They need secure services from ISPs and MSPs to survive today's hostile environment.

It's no secret that SMBs are highly vulnerable when it comes to cyber threats. The anecdotal numbers paint a pretty dire picture: It seems that half of all SMBs are attacked at least once by cyber crime, yet many owners think they're safe from online threats. Recent news stories indicate that one of the most common attacks on SMBs is a phishing scheme, which often lead to costly ransomware infections and loss of sensitive personal data and account credentials. In my many years in the security industry, most recently with a leading cloud security provider, I have seen the cyber threat landscape change dramatically -- and unfortunately, the security solutions provided by vendors lack the specific requirements of SMBs, and also leave little room for management and control of the network with the ISP. With everything moving to the cloud, end-point security alone is no longer adequate. But most cloud security solutions are still priced out of reach of the small and midsized business, and offer a tremendous disadvantage to ISPs: They take away network control and visibility from the service provider, making it difficult for them to keep the network running optimally when something goes awry.

Compounding the problem, small business owners are generally not cybersecurity or IT experts, and they typically lack in-house expertise to keep their networks and all connected devices adequately protected, especially given the number of threats and variants that inflict damage on a daily basis. Most available solutions on the market are geared towards large enterprises -- companies with big IT budgets and dedicated teams of people to handle ongoing management of those tools. This scenario leaves SMBs largely under-protected -- and cyber criminals are all too aware of this.

ISPs, which are often the only IT "staff" an SMB has, are in a perfect position to serve this market segment with an easily managed, convenient security solution, at the cost of a weekly cup of coffee. By offering their own cloud-based security-as-a-service (SECaaS) solution, ISPs can fill a much-needed gap with a security service that requires no hands-on deployment or management from the business end user and which protects all internet-connected devices from phishing, ransomware and other malware, at a cost that SMBs can easily afford.

Security in the carrier cloud: DNS is key to blocking and protecting
DNS is utilized in a vast majority of cyberattacks -- more than 90% to be exact. Why? Because DNS is what powers every web site look-up and web application request, and it can be easily used by bad actors to create malicious domains for phishing or ransomware campaigns without the targeted victim’s knowledge. Yet much can be learned from DNS queries that take place on the service provider network, which helps ISPs -- and their DNS provider -- pinpoint new threats before they’re even executed or within minutes of being launched. DNS data also helps identify infected devices so subscribers can be notified right away, and those devices isolated from doing harm to the service provider network and possibly infecting others.

DNS plays a critical role in a layered security strategy, also called "defense in depth," which is basically a multi-layered approach to cyber defense. The truth is no single solution will do it all. In today’s digital economy, businesses and individuals are increasingly targeted with fast-changing exploits that use advanced methods to avoid detection, and individual, point security solutions (e.g., firewalls, endpoint protection) do not provide adequate protection on their own.

Want to learn more about the tech and business cases for deploying virtualized solutions in the cable network? Join us in Denver on October 18 for Light Reading's Virtualizing the Cable Architecture event – a free breakfast panel at SCTE/ISBE's Cable-Tec Expo featuring speakers from Comcast and Charter.

Perhaps more importantly though, and the main reason a DNS-based approach to a SECaaS offering makes sense for ISPs, is that keeping the service in the ‘carrier cloud’ (rather than a third-party security provider’s cloud) allows ISPs to maintain visibility and management of the network, which only enhances the value and customer experience of the service they're providing. In other words, a DNS-based approach -- especially when it’s backed by data science and deep analytics, along with machine learning -- means threats are quickly detected and blocked, attacks are stopped, and devices are protected. Period. There is very little manual intervention that needs to happen on the ISP side, and none required from the business user.

Because DNS exists in all service provider networks already, it is an easy step to take for ISPs to utilize this infrastructure and offer a SECaaS solution to their business customers. The benefits to ISPs are the ability to maintain network visibility/control, increase revenues and strengthen brand loyalty. The benefit to small businesses is that their needs for broad, deep security are met without worry or difficulty.

Cyber crime is not going away. In fact, it's becoming more prevalent and more damaging every day, and SMBs are at a disadvantage when it comes to keeping themselves protected. As their needs for powerful, affordable security continue to increase, the opportunity for ISPs to deliver an effective cloud-based service that can be monetized will also grow.

Related posts:

As General Manager for Nominum's security and applications portfolio business, Arlen Frew oversees the company's go-to-market strategy, including sales, engineering, support and product management, as well as extending its OEM technology licensing business to security-as-a-service.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Current Issue
The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
Managing system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2023-03-17
The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that w...
PUBLISHED: 2023-03-17
The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenti...
PUBLISHED: 2023-03-17
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(...
PUBLISHED: 2023-03-17
A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt le...
PUBLISHED: 2023-03-17
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipula...