Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Network Security

7/7/2017
07:40 PM
Arlen Free
Arlen Free
News Analysis-Security Now
50%
50%

Small Businesses Need Secure ISPs

Small businesses can't do it alone: They need secure services from ISPs and MSPs to survive today's hostile environment.

It's no secret that SMBs are highly vulnerable when it comes to cyber threats. The anecdotal numbers paint a pretty dire picture: It seems that half of all SMBs are attacked at least once by cyber crime, yet many owners think they're safe from online threats. Recent news stories indicate that one of the most common attacks on SMBs is a phishing scheme, which often lead to costly ransomware infections and loss of sensitive personal data and account credentials. In my many years in the security industry, most recently with a leading cloud security provider, I have seen the cyber threat landscape change dramatically -- and unfortunately, the security solutions provided by vendors lack the specific requirements of SMBs, and also leave little room for management and control of the network with the ISP. With everything moving to the cloud, end-point security alone is no longer adequate. But most cloud security solutions are still priced out of reach of the small and midsized business, and offer a tremendous disadvantage to ISPs: They take away network control and visibility from the service provider, making it difficult for them to keep the network running optimally when something goes awry.

Compounding the problem, small business owners are generally not cybersecurity or IT experts, and they typically lack in-house expertise to keep their networks and all connected devices adequately protected, especially given the number of threats and variants that inflict damage on a daily basis. Most available solutions on the market are geared towards large enterprises -- companies with big IT budgets and dedicated teams of people to handle ongoing management of those tools. This scenario leaves SMBs largely under-protected -- and cyber criminals are all too aware of this.

ISPs, which are often the only IT "staff" an SMB has, are in a perfect position to serve this market segment with an easily managed, convenient security solution, at the cost of a weekly cup of coffee. By offering their own cloud-based security-as-a-service (SECaaS) solution, ISPs can fill a much-needed gap with a security service that requires no hands-on deployment or management from the business end user and which protects all internet-connected devices from phishing, ransomware and other malware, at a cost that SMBs can easily afford.

Security in the carrier cloud: DNS is key to blocking and protecting
DNS is utilized in a vast majority of cyberattacks -- more than 90% to be exact. Why? Because DNS is what powers every web site look-up and web application request, and it can be easily used by bad actors to create malicious domains for phishing or ransomware campaigns without the targeted victim’s knowledge. Yet much can be learned from DNS queries that take place on the service provider network, which helps ISPs -- and their DNS provider -- pinpoint new threats before they’re even executed or within minutes of being launched. DNS data also helps identify infected devices so subscribers can be notified right away, and those devices isolated from doing harm to the service provider network and possibly infecting others.

DNS plays a critical role in a layered security strategy, also called "defense in depth," which is basically a multi-layered approach to cyber defense. The truth is no single solution will do it all. In today’s digital economy, businesses and individuals are increasingly targeted with fast-changing exploits that use advanced methods to avoid detection, and individual, point security solutions (e.g., firewalls, endpoint protection) do not provide adequate protection on their own.


Want to learn more about the tech and business cases for deploying virtualized solutions in the cable network? Join us in Denver on October 18 for Light Reading's Virtualizing the Cable Architecture event – a free breakfast panel at SCTE/ISBE's Cable-Tec Expo featuring speakers from Comcast and Charter.

Perhaps more importantly though, and the main reason a DNS-based approach to a SECaaS offering makes sense for ISPs, is that keeping the service in the ‘carrier cloud’ (rather than a third-party security provider’s cloud) allows ISPs to maintain visibility and management of the network, which only enhances the value and customer experience of the service they're providing. In other words, a DNS-based approach -- especially when it’s backed by data science and deep analytics, along with machine learning -- means threats are quickly detected and blocked, attacks are stopped, and devices are protected. Period. There is very little manual intervention that needs to happen on the ISP side, and none required from the business user.

Because DNS exists in all service provider networks already, it is an easy step to take for ISPs to utilize this infrastructure and offer a SECaaS solution to their business customers. The benefits to ISPs are the ability to maintain network visibility/control, increase revenues and strengthen brand loyalty. The benefit to small businesses is that their needs for broad, deep security are met without worry or difficulty.

Cyber crime is not going away. In fact, it's becoming more prevalent and more damaging every day, and SMBs are at a disadvantage when it comes to keeping themselves protected. As their needs for powerful, affordable security continue to increase, the opportunity for ISPs to deliver an effective cloud-based service that can be monetized will also grow.

Related posts:

As General Manager for Nominum's security and applications portfolio business, Arlen Frew oversees the company's go-to-market strategy, including sales, engineering, support and product management, as well as extending its OEM technology licensing business to security-as-a-service.

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Cloud Security Threats for 2021
Or Azarzar, CTO & Co-Founder of Lightspin,  12/3/2020
Why Vulnerable Code Is Shipped Knowingly
Chris Eng, Chief Research Officer, Veracode,  11/30/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Assessing Cybersecurity Risk in Todays Enterprises
Assessing Cybersecurity Risk in Todays Enterprises
COVID-19 has created a new IT paradigm in the enterprise and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29572
PUBLISHED: 2020-12-06
app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field.
CVE-2020-29573
PUBLISHED: 2020-12-06
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\...
CVE-2020-27772
PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could po...
CVE-2020-27773
PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to appli...
CVE-2020-28950
PUBLISHED: 2020-12-04
The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.