Question

How can Vulnerability be prevented in companies? Give an example.

Answer 1

The following security measures can be taken by a company to avoid software vulnerability

Update software regularly:-

Installing the latest security patches and system upgrades on a regular basis is indeed an important step to be taken to protect a third-party or business software and the network connections they make.Leaving an application outdated and not following this measure will open an opportunity for cyber-criminals to manipulate any unknowns bugs and spread malware or accessing any confidential data that of the business. Only by patching those bugs and security holes regularly,the business can mitigate the risk of getting a data breach.

Installing strong firewall:-

Firewall is a must to protect any network.Any secure and reliable operating system comes with a basic firewall that offers basic protection against malware attacks.Business must invest to protect their systems with a strong firewall that monitor their internet traffic in and out and mitigate malware risks even further.

Investing in security tools:-

Firewalls can offer considerable protection against malware attacks but they are still not 100% invulnerable.To add an extra layer of protection,business must install in third party security tools in all its systems.Most security software offers real-time malware protection capabilities and various add-on security features that makes the systems almost resilient towards even the most sophisticated malware.Also the security tools manufacturers keep on updating their malware database behind the scenes and catches even the newest attack vectors that pass through all the other security loopholes.

Network monitoring:-

It is important that the network of a business is being monitored by a team of skilled IT professionals.They might use monitoring tools to monitor the network status and inform any network breach early.Early detection of security breach helps the business to take quick action before breach can wreak further havoc.

Example:-

A worm called Spida network worm exploited a security issue in MS-SQL server software package.Some installations of the software did not needed a password to login to the 'SA' system account.The worm utilised this loophole to spread itself by accessing the 'SA' account if it anyhow gets into to the network of a system using that buggy software package. Those businesses which diligently updated their MS-SQL servers became safe from the attack of such worms and those which didn't are still vulnerable to be attacked by such malware.