Web data management specialist Avanite has warned that data stored in Internet caches pose a significant security risk to businesses.
Avanite CEO Francesco Giarletta warned that organisations need to urgently address the potential security issues that simple web browsing data can cause.
Giarletta says that most businesses are not aware of the risks posed by this unsecured Internet browsing data, which could be used by a hacker to build a profile of the business by looking at the sites browsed, who they talk to and the systems they use, such as accounting software.
“Webcache databases store huge amounts of data about how individuals use the Internet,” said Giarletta. “This data goes far beyond the websites you visit and can include information such as usernames, passwords and account numbers. All this data is recorded in plain text and available to any hacker or cybercriminal.
“Additionally many websites prompt the user to remember login credentials, which, when opted for, stores an authentication cookie on the machine.
“There have been multiple reports of cookie hijacking, where these authentication cookies are stolen or copied enabling a cybercriminal to log into a site without supplying any credentials. With businesses increasingly using cloud-based services, this means that user logins for everything from the company CRM through to accounting systems are at risk of compromise.”
Giarletta believes that while the introduction of GDPR will force businesses to take measures to protect this data, many companies simply aren’t aware of its presence within their systems.
“Even when using personal devices people need to be aware of how this data could be exploited or used,” he said. “While websites should be honest about how they will use cookies if you choose to allow them, the reality is many simply ask your permission without defining how that data will be used. Under GDPR this should change but it is important to be aware of what personal information you are potentially giving away.”
To address these challenges Avanite has developed a free analysis tool that enables organisations to see the data generated by simple web browsing and using web based applications. By using the free downloadable tool organisations can see what data is present on PCs and servers and the savings in disk space and storage that can be realised by addressing the issue. The tool supports all common Windows browsers and displays the number of known advertising and tracking cookies found on the system.
Organisations can use the WebData Data Analysis tool to gain visibility of the web browser data that resides in the network and the issues it is creating. They can then use Avanite’s WebData Control solution to remove unnecessary data. WebData Control is the only solution that reduces the size of users’ web browser databases, and gives administrators full control over users’ browsing data to ensure that only required information is kept.
The Avanite solution can reduce the size of WebCache files by 80 to 90%, and the number of cookies in a typical WebCache from typically 5,000 or more to a few hundred.
Avanite is offering a free one month license of WebData Control to allow businesses to clean their systems as part of their obligations under GDPR. To access the free trial visit www.avanite.com