{"id":2759,"date":"2019-05-16T01:00:08","date_gmt":"2019-05-16T01:00:08","guid":{"rendered":"https:\/\/www.canspace.ca\/blog\/?p=2759"},"modified":"2020-01-15T23:32:55","modified_gmt":"2020-01-16T04:32:55","slug":"the-three-most-frequent-types-of-hacker-attacks-and-how-to-prevent-them","status":"publish","type":"post","link":"https:\/\/www.canspace.ca\/blog\/security\/the-three-most-frequent-types-of-hacker-attacks-and-how-to-prevent-them\/","title":{"rendered":"The Three Most Frequent Types of Hacker Attacks and How to Prevent Them"},"content":{"rendered":"

It seems like hacking is in the news constantly these days. Whether you\u2019re a large corporation or your run a small ecommerce site, you have it in your best interest to prevent hackers from breaking into your site and stealing your customers\u2019 valuable information. Here are the most common types of hacker attacks your website may face, and how to protect yourself from them:<\/p>\n

\"\"<\/p>\n

Denial of Service Attacks<\/h2>\n

One of the simplest (but also most effective) types of attack, the DDoS attack uses sheer force to try to overwhelm your website\u2019s system. Think about it like millions of people trying to visit your site all at the same time, but artificially\u2014the toll it takes on your site\u2019s resources effectively stops the server from being able to serve up your site to legitimate customers.<\/p>\n

The interesting thing about this type of attack is that it doesn\u2019t actually try to steal your site\u2019s information. Its only purpose is to make the site inoperable.<\/p>\n

One of the easiest ways to stop these types of rudimentary attacks is to use a good firewall. At CanSpace Solutions, we monitor our servers and client accounts 24\/7, and when we notice a traffic spike that looks suspicious, we respond accordingly to ensure that the website stays online.<\/p>\n

In addition to your main firewalls, we also offer a Web Application Firewall, which protects the particular application you\u2019re running (like WordPress). We base our WAF on OWASP rules, which are the industry standard.<\/p>\n

Man in the Middle (MiM) Attacks<\/h2>\n

This type of attack relies on a hacker intercepting the communication between a server and a trusted user. The hacker\u2019s computer effectively pretends it\u2019s the trusted user by substituting its IP address for the trusted client, and the server is none the wiser, potentially submitting valuable private information to the hacker.<\/p>\n

Our use of Domain Name System Security Extensions (DNSSEC)<\/a> helps to verify the user interacting with the server, which prevents MiM attacks as users first arrive on your site. Once the user is on your site, the SSL certificate<\/a> (included free of charge with every CanSpace Solutions hosting plan!) takes over and ensures that the rest of the exchange is secure.<\/p>\n

Phishing Attacks<\/h2>\n

An entirely different class of attack, this one depends on user error and is therefore harder for us to protect our customers from.<\/p>\n

The classic phishing attack begins with an email sent to a person that appears to come from a legitimate source and asks for some key piece of information (such as entering your email address and password). Once the person has entered their information into the fake website, the hackers effectively have all the person\u2019s privileges and can therefore do whatever they want. This is nearly impossible to stop until the user realizes that there\u2019s a problem. If this scenario happens to you and you think you may have submitted your information, you should let us know as soon as possible and we can update your password to make sure your account is secure.<\/p>\n

One extra measure we do have in place is the use of two-factor authentication for the logins of all our hosting customers. This requires that the person trying to log in has either the email address or the phone of the customer, so if the hackers don\u2019t have this information, their attempts would be thwarted.<\/p>\n

In general, though, it\u2019s best not to fall for phishing attacks in the first place. Watch out for these classic signs of a phishing message:<\/p>\n