Feeds

Small biz scrappers urged to take the fight to hackers

Active defence in a hostile world

Intelligent flash storage arrays

RSA Europe Small businesses should consider the possibility of developing well formulated plans for "hacking back" at aggressors in the event of a hack attack.

Presenting an "active defence" would not be a form of vigilantism and could even work within the law, argued two speakers at a presentation at the RSA Europe conference.

Companies and governments are constantly under siege by hackers and malware. Standard incident response is failing and police are overstretched. Faced by these challenges, small businesses have the option to actively respond against attackers rather than mounting only a passive defence.

Rather than jumping to the conclusion that any defensive action beyond currently accepted techniques is illegal, better and more effective options need to be considered, the argument runs.

David Willson, a lawyer at Titan Info Security Group, a retired US Army officer, said active response could include measures such modifying a persistent bot infection on a network so that a command channel is swamped. The particular response ought to depend on the severity and persistence of a threat. Measures such as running a honeypot can also help.

Small businesses ought to consult with lawyers beforehand in coming up with an active defence response plan that's akin to a disaster recovery procedure.

Attribution is normally considered a difficult problem in determining the source of cyber-attacks.

Davi Ottenheimer, president of flyingpenguin, an expert in incident response and digital forensics, added that attackers running denial of service attacks almost always connect back to their main server.

Microsoft's ongoing Project Mars (Microsoft Active Response for Security) botnet takedown campaign has been criticised by elements of the security community for failing to work with law enforcement. The lack of liaison means that takedowns could interfere with ongoing (secret) police investigations.

Similar criticisms might potentially be levelled at small businesses running an active defence.

Ottenheimer argued that if law enforcement can't help businesses then businesses are entitled to take their own action. "At the very least you can make it too expensive for attackers to target you so that they move onto other targets," he said. ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.