Toggle Menu

How can I protect my web site from hacking?

The latest news from Creative-i-Design

Hacking?  Really?  Isn't that just in the movies?
Do you remember the 80s movie War Games? A geeky kid looking for a new computer game nearly triggers a nuclear war.

The reality is that there are millions of attempts to hack computers, networks and web sites every day.  Last year there were 10 million attempts to break into the Pentagon EVERY DAY.

Have a look at this web site, which monitors about 0.001% of all the hacking attempts going on in real time.

Norse

Is this a deliberate attack on my company?
Almost certainly not – all but a tiny handful of attacks are from so-called zombie computers performing automated tasks, whose owners have no idea what they're doing.

Who is doing this – is it some spotty kid in his bedroom?
The huge majority of hacking attacks are run by criminal gangs who set up automated attacks: computers infected with malicious software that trawl the internet looking for unprotected web sites so it can infect them with malicious code.

It's the equivalent of someone trying your doors and windows to see if they're unlocked.

What does the malicious code do?
There are typically three outcomes: your web site displays spurious adverts; links to other malicious sites are added; or your web site downloads malicious code to the user's computer which attempts to steal your data or hold you to ransom.

What's the worst that can happen?
At worst, you lose your web site, your client details are compromised, private information is stolen, and your business reputation goes down the toilet.

Do I need to protect my web site?
Hell, yes!  Do you care about your business reputation, your clients' data, your clients' own computers, their private information?  If the answer is "yes" to any of these, you MUST do something.

What do I need to do?
The simple answer is "get a good web design company".  You want a company to manage the servers on your behalf, and handle the following:

  • Server management
  • IP blocking
  • Adaptive access controls
  • FTP access limitations
  • Filtering tools
  • SSH controls
  • Lockout management
  • Monitoring tools
  • Malware analysis/management tools
  • Platform security monitoring
  • Server operating system and environment management

It's also vitally important that you monitor your server's regular updates and security patches.  If you run a Content Management System, you need to keep this up to date too.

If you run a web server yourself, it's a lot more complicated: while you might save a few pounds, you're also without professional help.  That means you're extremely vulnerable. And you're on your own.

Shameless plug
Creative-i-Design manages web sites for a range of clients across a multitude of business areas. We've got specialist team members whose only function is server and site security, so if you want your web site to stay clean, your best bet is to talk to us.

 

BACK TO NEWS

SHARE THIS SITE ON FACEBOOK SHARE THIS SITE ON TWITTER