Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Network Security

7/7/2017
07:40 PM
Arlen Free
Arlen Free
News Analysis-Security Now
50%
50%

Small Businesses Need Secure ISPs

Small businesses can't do it alone: They need secure services from ISPs and MSPs to survive today's hostile environment.

It's no secret that SMBs are highly vulnerable when it comes to cyber threats. The anecdotal numbers paint a pretty dire picture: It seems that half of all SMBs are attacked at least once by cyber crime, yet many owners think they're safe from online threats. Recent news stories indicate that one of the most common attacks on SMBs is a phishing scheme, which often lead to costly ransomware infections and loss of sensitive personal data and account credentials. In my many years in the security industry, most recently with a leading cloud security provider, I have seen the cyber threat landscape change dramatically -- and unfortunately, the security solutions provided by vendors lack the specific requirements of SMBs, and also leave little room for management and control of the network with the ISP. With everything moving to the cloud, end-point security alone is no longer adequate. But most cloud security solutions are still priced out of reach of the small and midsized business, and offer a tremendous disadvantage to ISPs: They take away network control and visibility from the service provider, making it difficult for them to keep the network running optimally when something goes awry.

Compounding the problem, small business owners are generally not cybersecurity or IT experts, and they typically lack in-house expertise to keep their networks and all connected devices adequately protected, especially given the number of threats and variants that inflict damage on a daily basis. Most available solutions on the market are geared towards large enterprises -- companies with big IT budgets and dedicated teams of people to handle ongoing management of those tools. This scenario leaves SMBs largely under-protected -- and cyber criminals are all too aware of this.

ISPs, which are often the only IT "staff" an SMB has, are in a perfect position to serve this market segment with an easily managed, convenient security solution, at the cost of a weekly cup of coffee. By offering their own cloud-based security-as-a-service (SECaaS) solution, ISPs can fill a much-needed gap with a security service that requires no hands-on deployment or management from the business end user and which protects all internet-connected devices from phishing, ransomware and other malware, at a cost that SMBs can easily afford.

Security in the carrier cloud: DNS is key to blocking and protecting
DNS is utilized in a vast majority of cyberattacks -- more than 90% to be exact. Why? Because DNS is what powers every web site look-up and web application request, and it can be easily used by bad actors to create malicious domains for phishing or ransomware campaigns without the targeted victim’s knowledge. Yet much can be learned from DNS queries that take place on the service provider network, which helps ISPs -- and their DNS provider -- pinpoint new threats before they’re even executed or within minutes of being launched. DNS data also helps identify infected devices so subscribers can be notified right away, and those devices isolated from doing harm to the service provider network and possibly infecting others.

DNS plays a critical role in a layered security strategy, also called "defense in depth," which is basically a multi-layered approach to cyber defense. The truth is no single solution will do it all. In today’s digital economy, businesses and individuals are increasingly targeted with fast-changing exploits that use advanced methods to avoid detection, and individual, point security solutions (e.g., firewalls, endpoint protection) do not provide adequate protection on their own.


Want to learn more about the tech and business cases for deploying virtualized solutions in the cable network? Join us in Denver on October 18 for Light Reading's Virtualizing the Cable Architecture event – a free breakfast panel at SCTE/ISBE's Cable-Tec Expo featuring speakers from Comcast and Charter.

Perhaps more importantly though, and the main reason a DNS-based approach to a SECaaS offering makes sense for ISPs, is that keeping the service in the ‘carrier cloud’ (rather than a third-party security provider’s cloud) allows ISPs to maintain visibility and management of the network, which only enhances the value and customer experience of the service they're providing. In other words, a DNS-based approach -- especially when it’s backed by data science and deep analytics, along with machine learning -- means threats are quickly detected and blocked, attacks are stopped, and devices are protected. Period. There is very little manual intervention that needs to happen on the ISP side, and none required from the business user.

Because DNS exists in all service provider networks already, it is an easy step to take for ISPs to utilize this infrastructure and offer a SECaaS solution to their business customers. The benefits to ISPs are the ability to maintain network visibility/control, increase revenues and strengthen brand loyalty. The benefit to small businesses is that their needs for broad, deep security are met without worry or difficulty.

Cyber crime is not going away. In fact, it's becoming more prevalent and more damaging every day, and SMBs are at a disadvantage when it comes to keeping themselves protected. As their needs for powerful, affordable security continue to increase, the opportunity for ISPs to deliver an effective cloud-based service that can be monetized will also grow.

Related posts:

As General Manager for Nominum's security and applications portfolio business, Arlen Frew oversees the company's go-to-market strategy, including sales, engineering, support and product management, as well as extending its OEM technology licensing business to security-as-a-service.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
COVID-19: Latest Security News & Commentary
Dark Reading Staff 11/19/2020
New Proposed DNS Security Features Released
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/19/2020
How to Identify Cobalt Strike on Your Network
Zohar Buber, Security Analyst,  11/18/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: He hits the gong anytime he sees someone click on an email link.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29071
PUBLISHED: 2020-11-25
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform as attachments, when the -htmlview URL is directly accessed. The impact ranges from executing commands as root on the server to retrieving se...
CVE-2020-29072
PUBLISHED: 2020-11-25
A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires user interaction (opening a link) and successful exploitation could lead to encrypted e-mail content leakage via messages/sent?format=js and popup?format=js.
CVE-2020-26241
PUBLISHED: 2020-11-25
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy (at 0x00...04) co...
CVE-2020-26242
PUBLISHED: 2020-11-25
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, there is a Denial-of-service (crash) during block processing. This is fixed in 1.9.18.
CVE-2020-26240
PUBLISHED: 2020-11-25
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on...