|
Small and Midsize Enterprises Are Likely Targets for Internet Attacks Gartner Delivers Security Advice
|
|
STAMFORD, Conn., October 10, 2000 -- According to Gartner Group, Inc. (NYSE: IT and ITB) research, by 2003, 50 percent of small and midsize enterprises (SMEs) that manage their own network security and use the Internet for more than e-mail will experience a successful Internet attack, such as Web site hacking and the spreading of viruses. More than 60 percent of those enterprises will be unaware that they have been attacked.
|
|
SMEs are especially vulnerable to malicious attacks because they usually cannot afford, or do not attract, personnel who have security experience. As a result, part-time employees or personnel with less than top-notch qualifications often manage key enterprise servers. Moreover, SMEs often use regional Internet service providers that provide unknown levels of security, which puts SMEs at a greater risk of an attack. However, SMEs can implement some defensive actions to protect their businesses.
|
|
"With small and midsize enterprises doing more business on the Internet, their networks are exposed to security breaches," said James Browning, a Gartner research director. "Defensive action is required to protect the enterprise from unauthorized and malicious users."
|
|
According to Gartner, SMEs should consider the following four steps to strengthen their network security.
|
- Security Checkup: SMEs connected to the Internet should consider contracting with a security firm to conduct an audit and risk assessment of their networks. The effort should include an internal network security audit and an external penetration test. That should take place whenever an SME makes major changes to its Web site or firewall, and at a minimum of once a year.
- Firewall Configuration: Ensuring that a proper firewall is installed is crucial. SMEs should focus on firewall appliances that provide a base level of security without requiring detailed security knowledge. SMEs should request quotes for managed firewall and intrusion detection services from Internet service providers. Those types of services usually cost less than the equivalent salary of a half-time firewall administrator.
- Boundary Services: Scanning incoming e-mail for viruses is a crucial security measure. SMEs can use either desktop or server-side antiviral protection. SMEs should take immediate action to disallow relay and halt the entry of spam into their environments.
- Consolidated Remote Access With Strong Authentication: SMEs that provide dial-in access to e-mail and other enterprise systems should eliminate desktop modems and use consolidated modem pools and remote access servers. SMEs should require the use of hardware tokens to authenticate remote users.
|
|
According to Gartner, those four security measures will protect more than two-thirds of SMEs that are connected to the Internet. SMEs that must manage more highly sensitive environments – such as law firms, regional banks, independent insurance agencies, and state and local government agencies – should plan for additional precautions or outsource their security operations to an experienced managed service provider. Gartner recommends the following actions:
|
- Use virtual private networks for secure remote access over the Internet.
- Deploy intrusion detection to alarm the enterprise of internal and external attacks.
- Use firewall log analysis and e-mail content filtering to detect misuse of the Internet connection by employees or business partners.
|
About Gartner
Gartner provides unrivaled thought leadership for more than 10,000 organizations, helping clients to achieve their business objectives through the intelligent and efficient use of technology. Additionally, Gartner helps technology companies identify and maximize technology market opportunities. Gartner's technology content and strong brand reach IT professionals globally through Gartner Research, its research and advisory unit, Gartner Services, its custom consulting unit; Gartner Events, including Gartner's renowned Symposia; and, at www.gartner.com. Gartner subsidiary TechRepublic, Inc. (
www.techrepublic.com) is the leading online destination developed exclusively for IT professionals by IT professionals. Gartner, founded in 1979 and headquartered in Stamford, Connecticut, achieved fiscal 1999 revenues of $734 million. Gartner's 4,000 associates, including 1,200 research analysts and consultants, are in more than 80 locations worldwide. For more information about Gartner's industry-leading products and services, please visit us on the Web at www.gartner.com.
|
|
CONTACT:
|
|
|
|
