English
Magyar
As cybercrime is not only on the rise but is also becoming increasingly sophisticated, protecting IT systems is a priority for every organisation. For those who need to use dedicated servers (or VPS), the potential consequences of falling victim to a cyberattack are even greater. Here we share a few simple ideas for improving security.
Keep your software up to date
Cybercriminals are constantly on the lookout for software vulnerabilities and actively target servers running vulnerable applications. That is why application developers regularly release updates and security patches to fix these vulnerabilities and keep users safe.
As soon as an update or patch is released, system administrators must install it as soon as possible to maintain security. The longer this is delayed, the greater the risk of a hacker attack or malware infection. The managed dedicated hosting solution ensures that the operating system is updated in a timely manner, whilst for all other applications, it is recommended that automatic updates be enabled.
Just because you’re not using your old software doesn’t mean a hacker won’t. If it’s installed on your server and hasn’t been updated to the latest version, it poses a threat that hackers can exploit. This includes everything from website plugins and themes to software you no longer need. If you’re not using it, delete it, and the risk will be eliminated immediately.
Scanning for malware and viruses
According to Dataprot, there are more than a billion pieces of malicious software, and half a million new ones are discovered every day. These take the form of viruses, Trojans, ransomware, worms and other types of malware, all of which are capable of causing various types of damage to the server and the content it hosts.
To protect the server, the operator must carry out regular malware scans capable of detecting threats and placing them in quarantine before they cause any damage. Malware scanning is available from your service provider.
Protection against DDoS attacks
A distributed denial-of-service (DDoS) attack floods the server with so many requests that it is unable to handle them all. As a result, the server crashes and all services go offline.
Cybercriminals can trigger this by taking control of thousands of machines (botnet networks) and directing them all at your server simultaneously. To prevent this, choose a hosting provider that protects your server with DDoS protection. This detects suspicious mass requests and prevents them from reaching your server or VPS.
Using a VPN to access the site
If you access a dedicated server via the internet, make sure you use a VPN connection. VPNs (virtual private networks) encrypt the data you send, ensuring that your login details cannot be stolen en route and then used to hack into the system. This is particularly important if you are connecting to the internet via a public or open Wi-Fi network.
Changing the default SSH port
Just as hackers are familiar with default usernames, they are also familiar with SSH’s default port 22. Cybercriminals use bots to search for servers using this port, and once they find them, they exploit them for brute-force attacks. To maintain server security, change the default port immediately, ideally to a port number above 1024, which most scanners are unable to detect.
Setting up individual permissions
Access to the server should only be granted on a need-to-know basis, so that only those who require root access – namely, the server administrator – can access it. Everyone else must have their own account, with access rights tailored to the tasks they need to perform.
So, if an employee’s login details are stolen, hackers are restricted to only those areas to which the employee has access, rather than the entire server. This helps to limit any potential damage.
Using strong passwords
Modern brute-force tools can crack weak passwords in a matter of seconds, giving cybercriminals easy access to the server. Enforcing strong passwords prevents employees from using weak and easily guessed passwords.
Passwords containing random numbers, letters, capital letters and symbols are much more difficult to crack. Password managers can be used so that employees do not have to memorise the combination or make the mistake of writing them down. For added security, ensure that two-factor authentication is also implemented, which requires an additional code sent to the user’s mobile phone.
Regular backups
If a cybercriminal demands a ransom or destroys your data (ransomware), the consequences can be catastrophic. Backups can help you overcome this, as they enable you to restore your server quickly without having to start from scratch or pay a ransom.
The latest backup solutions allow you to set up automatic, scheduled backups at the frequency you require. Backups are stored remotely, encrypted for security, and their integrity is checked to ensure they remain intact and will work when needed.