At the Frontline: Fischer International's Andrew Sroka

Last month, one of the largest cyber attacks in recent history, whose victims included thousands of companies and 10 U.S. government agencies, was uncovered.

The attack, which was later dubbed as the "Kneber Botnet," allowed hackers to access login credentials to online financial systems, as well as to social networking sites and e-mail systems.

One company that is trying to keep organizations and government institutions on top of cyber threats is Florida-based IT data security firm Fischer International. In this "At the Frontline," SIW speaks with Fischer's president and CEO, Andrew Sroka, about the growing number of cyber attacks and what companies can do to protect themselves.

With the recent news that thousands of companies, as well as several U.S. government agencies have fallen victim to the Kneber Botnet, what are some steps companies can take to protect their data from hackers?

Kneber is kind of an interesting event for a variety of reasons. First of all, it is not exactly ground breaking hacker-type technology. If we really look at the metrics of what Kneber is, it is relatively old Zeus spyware or botware that's a newer variant which has been employed to develop this large network. Seventy-four thousand assets over 196 countries is pretty large by anyone's standards. It's not exactly earth-shaking technology and what is really being exploited by Kneber and Kneber-like Zeus infections is poor security policies that are in place at these organizations. Fischer's perspective is that organizations have a tendency to become complacent with their security profile in that we think we have anti-virus in place, so we're ok there; we think we have intrusion detection systems and that we're ok there; and we have employed the right software tools in our organization to defend against these external threats. I think organizations have to overcome that (event-driven reaction to security mindset) when it comes to implementing security. Security is a process, so establishing control over assets and establishing policies within an organization as they relate to security (and) to prevent these credential breaches are key. (The hacking industry) is the only industry that consistently demonstrates innovation.

Where do many of these cyber attacks originate and what is being done in those areas to curtail cyber criminals?

This content continues onto the next page...