Every day there are more online backup options: Mosy.com, Xdrive, Adrive.\u00a0 This is a significant security concern that should be more respected.\u00a0 These online backup solutions offer encrypted data transmission and strong firewalls.\u00a0 Although companies may say they are 100% secure, this is not a guarantee any organization can reasonable make.\u00a0 A system can never be completely secure.\u00a0 A system can only be free of known exploits.\u00a0 Commonly, large companies have their servers hacked and data stolen.\u00a0 This happens to companies as large as Comcast, Novell, Citibank, and\u00a0 Microsoft.\u00a0 Even if certain online backup solutions are 100% secure, this would not ensure that all other are and will be in the future.\u00a0 An attacker who gains access to an online backup server would have access to varied and immense data.<\/p>\n
Assets &Security Goals:
\n–Online backups should be as removed from corporate external networks by multiple levels of protection once stored.
\n–Companies should seriously consider whether it would be okay if their data leaked, and what would be the consequences for customers.<\/p>\n
Adversaries and threats:
\n–Enemies: Any rival to a company or person who uses online backup.
\n–Experienced Adverseries: Hackers with unreleased exploits to access servers owned by Mozy and other backup solutions.<\/p>\n
Potential weaknesses:
\n–A port scan of all online backup company servers would likely reveal a vulnerability somewhere.
\n–A dictionary attack could be conducted on Mozy log-ins.<\/p>\n
Defenses:
\n–The provider should remove the data from network access once backed-up.
\n–Do not use online backup if you require the data to be confidential or it could be used to the advantage of a rival.<\/p>\n
Likely online backup will become more ubiquitous as all emerging technologies.\u00a0 When it becomes more prevalent, this issue will become a strong privacy concern.<\/p>\n","protected":false},"excerpt":{"rendered":"
A system can never be completely secure. A system can only be free of known exploits. Continue reading