High-speed connectivity opens firms to hackers

Small businesses are at risk of increased cyber attacks as they ride on the high-speed internet bandwagon, the result of fibre optic connectivity.

Last August, the Business Daily revealed how some of the local banks’ internal security systems are weak and prone to attack.

One internet security experts interviewed was able to hack into a customer’s database in one of the smaller banks which gave him full access to personal information, confirming that 60 per cent of the banks had insecure systems.

Security experts say the change over to the fibre optic will make Kenyan businesses more vulnerable to cyber criminals.

Cyber attacks

Mr John Gichuki, an information security consultant, says there is already an increase in cyber attacks.

“Several organisations have complained that immediately they switched to undersea cable, a swap of spam hit through their email server within an hour of operation,” he says.

Particularly vulnerable are small and medium enterprises (SME) which do not have security.

A new study carried out in the US by the National Cyber Security Alliance (NCSA) showed that small businesses were more vulnerable to cyber criminals “due to their disorganised approach” to security issues.

In the study, only 28 per cent of the American small businesses have formal internet security and worse still, only 86 per cent said that they have no one to solve IT issues.

Mr Patrick Kiniti of Techmax Solutions, a company that specialises in network security, vulnerability assessment and penetration testing, fears there will be more sophisticated attacks on Kenyan websites and network installations from users abroad.

With Kenya on the fast lane to get connected, attackers from abroad can launch sophisticated attacks such as Distributed Denial of Service (DDOS) – which makes a computer resource unavailable to its intended users.

“They (small businesses) are vulnerable because they do not understand the threats,” says Mr Evans Ikua, the lead consultant at Lanet Consulting- an internet security company.

A lot of Kenyan businesses think that setting up a firewall and an intrusion detection and prevention system in front of their network will block attackers from gaining access to their network.

“When a small business has their website defaced, this could lead to loss in customer confidence, loss in business and revenue,” says Mr Kiniti.