Resilience under attack: Techniques for continuing online business in the face of security compromise

Justin Clarke

Journal of Business Continuity & Emergency Planning, 2009, vol. 3, issue 3, 222-226

Abstract: As their reliance on online commerce grows, businesses are increasingly exposed to loss through unplanned outages. Security compromises represent a major cause of such outages. The traditional response to a compromised application has been to temporarily disable access to it, or to take the application offline while the issue is triaged, investigated and resolved. This can take a number of hours or even days, which can have a very real impact on business. In such cases, particularly where the vulnerability does not lead to a direct application outage, businesses will often decide to accept the risk of the security compromise in the short term. Yet this can increase the risk of the exposure being discovered by a malicious party or increase the window of opportunity for attackers where the exposure is already being exploited. It is however possible to mitigate or contain the risk of a security compromise through the use of web application firewalls (WAFs), together with appropriate organisational processes, staffing and training. WAFs allow the business to quickly and safely mitigate the risk and impact of a compromise while the issues behind the compromise are investigated and addressed. Although potentially expensive, a business case can be made for the pre-emplacement of WAFs to protect an application where the business impact of downtime is deemed critical.

Keywords: web application firewall; ecommerce; resilience; internet; information security (search for similar items in EconPapers)
JEL-codes: M1 M10 M12 (search for similar items in EconPapers)
Date: 2009
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/723/download/ (application/pdf)
https://hstalks.com/article/723/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:jbcep0:y:2009:v:3:i:3:p:222-226

Access Statistics for this article

More articles in Journal of Business Continuity & Emergency Planning from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().