Defending against cyber-criminals targeting business websites

Abstract

There is a well-known issue facing the industry today of cyber-criminals targeting business websites. This impacts organisations of all sizes and is a growing concern. While there are a number of ways to address this issue, the 'security as a process' approach forms the ideal basis for any strategy. Security as a process should be accepted as the norm within every business. It allows operation within areas that previously would have been seen as hostile - for example, running websites on the Internet. While there are a number of ways to address the issue of cybercrime, the 'security as a process' approach forms the ideal basis for any strategy. Processes such as system hardening, security patching, security testing, log analysis, and so on can all be iterative, feeding back into the security process to improve security in the future, explains Mark Lowe of Portcullis Computer Security.