Download - MWEB Business: Hacked
![Page 1: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/1.jpg)
Management Information Systems
10.12.2012
MWEB Business: Hacked
![Page 2: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/2.jpg)
Outline
1. What technology issues led to the security breach at MWEB?
2. What is the possible business impact of this security breach for both MWEB and its customers?
3. If you were an MWEB customer, would you consider MWEB's response to the security breach to be acceptable?
4. What should MWEB do in the future to avoid similar incidents?
![Page 3: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/3.jpg)
o South Africa’s 2nd largest Internet Service Provider
o Founded in 1997
o Divisions: MWEB Connect and MWEB Business
o Customer base:
• Home users
• Small, medium and large enterprises
• Corporate clients
![Page 4: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/4.jpg)
Portfolio
o Tailored Business Solutions
o Personalized account management
o Own world class network infrastructure
o International connectivity redundancy
o Next generation data centers
o 24/7 Technical support
![Page 5: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/5.jpg)
Security Measures
o Using AVG Internet Security as partner
o Identity protection
o LinkScanner (safe surfing)
o WebShield (safe social networking)
o Antiphishing, Antispam, Antivirus,
Antispyware
o Enhanced firewall
o Automatic e-mail cleaning
o Blocking network ports commonly used by
hackers
![Page 6: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/6.jpg)
Issue:
oCompromised subscribers account details
oPublished logon and password details
Reason
oHackers gained access to Web based Internet
Solutions’ self-service management system
o outsourced, not in total control
Dangerous Breach
![Page 7: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/7.jpg)
Data Management
![Page 8: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/8.jpg)
Business Impact
o Notifying customers and find solution
o Determine reason for breach = interruption of business processes
o Work together with IS
o Lost trust of customers gain back
o Implement proper policies and controls
o Prepare for legal, financial risks
o Threat to customer retention and reputation
Very tricky process with
intangible and tangible costs
![Page 9: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/9.jpg)
Customer Impact
o Need for explanation
o Need for behavioral recommendations
o Loss of personal information (privacy)
o Data lost or inaccurate
o Additional compromising of related accounts
o Inconvenience: have to change password or
could not access the service
o Lost trust in the company
![Page 10: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/10.jpg)
Response to the security breach
o 25.10.2010 Security Breach
“Dear sirs if you see your own name on the list maybe it's time
for switching ISP (in case you have any option) :D”
o Disclosed and responded the same day (quickly!!)
o User names recreated
Passwords changed
o No personal information was lost
o Clients did not suffer any losses
![Page 11: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/11.jpg)
o Internet Solutions network own IPC network
o Repels 5000 attacks a day!
o Added security measure reset the passwords
o Investigation together with Internet Solutions
Acceptable response? Yes
Saved trust? No
Response to the security breach
![Page 12: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/12.jpg)
o Digital certificates
o Intrusion detection system
o MIS audit
o Regular and thorough testing
o Improved identity management
To-do list for the future
![Page 13: MWEB Business: Hacked](https://reader033.vdocuments.net/reader033/viewer/2022061222/54c137924a795901268b4570/html5/thumbnails/13.jpg)
Thank you!