Linux has come a long way since its humble beginnings as Finnish student Linus Torvalds\u2019 pet project. With over 27.8 million lines of code to its name and its rise as the OS of choice for servers, public cloud, and supercomputers, Linux has earned an unmistakable spot among the top operating systems in the world today. Not only that, but the world\u2019s most popular mobile operating system, Android, also uses a Linux kernel.<\/p>\n
In the workplace, Linux has long been developers\u2019 go-to OS and has fared better in the technical rather than the business environment. However, with most organizations now requiring an IT department and digitalization efforts pushing them to often develop their own tools and applications to serve their particular needs, many company networks now include computers running on Linux.<\/p>\n
Add to this its cost-effectiveness \u2013 it is, after all, free \u2013 and what is considered increased security<\/a> with zero effort, and it shouldn’t come as a surprise that many organizations are turning to Linux and its many distributions, from Debian, Centos, and Ubuntu to Red Hat\u2019s Rhel and Microsoft\u2019s CBL-Mariner. But while its status as one of the world\u2019s biggest open-source projects is undeniable, its rumored invulnerability is a misleading myth. Let\u2019s look at what\u00a0data security<\/a>\u00a0looks like on Linux and the often-exaggerated claims that accompany it.<\/p>\n The number of contributors to Linux\u2019s source code is staggering: over 15,000 developers from approximately 1,500 companies have contributed to it since 2005. The assumption is that, with so many developers working on the code, the chance of vulnerabilities and bugs being detected is high. However, because Linux is a community-based project and all developers can contribute to it, it does not mean they are security experts or aware of the latest security issues to look out for.<\/p>\n This essentially means that the Linux system, like all OS, is not foolproof. With its millions of lines of code and numerous Linux distros, developers are likely to overlook security holes as much as any other programmers working on better-known operating systems. Thus, dismissing security concerns simply because your employees are Linux users can be a dangerous misstep. Therefore, it is important that organizations put advanced security measures in place for Linux as well.<\/p>\n Because of its relatively modest desktop market share, many believe Linux is free from the threat of viruses and malware that plague Windows and, to a lesser extent, Unix-based macOS. However, its popularity as an OS for web servers and supercomputers has drawn the attention of cybercriminals looking to do serious damage or deploy cryptocurrency miners on servers.<\/p>\n From the SpeakUp backdoor Trojan used to attack Chinese Linux servers earlier this year to the recurring plague of Mirai, there are enough threats to Linux security to call into question the myth of its invulnerability. Companies, therefore, need to ensure that their endpoints running Linux also have cybersecurity software such as antivirus solutions and firewalls installed and a clear plan of action in case of a cyberattack.<\/p>\n Due to the reduced risk of cyberattacks and the limited number of hackers willing to waste their time breaking into a Linux-running computer, data on them is believed to be more secure and, therefore, easier to protect. The US National Security Agency (NSA) developed Security-Enhanced Linux (SELinux) also allows administrators to configure access controls and permissions for the applications, processes, and files on a Linux system. However, it does not protect data from employees who need access to sensitive data to perform their daily tasks.<\/p>\n As such, often when it comes to data protection, the main problem is not so much the relentless attacks of outsiders but the negligence of\u00a0insiders<\/a>\u00a0that puts sensitive information at risk.\u00a0A third of all data loss,\u00a0<\/a>in fact, occurs because of careless employees. Essentially this means that data is vulnerable because of computers\u2019 own authorized users rather than the operating system they are running on.<\/p>\n Everything from accidentally sent emails and forgotten USB drives to information copy-pasted onto public forums or uploaded onto insecure third-party cloud services can happen whether someone is a Linux, macOS, or Windows user. For this reason, companies must not neglect\u00a0data loss prevention measures<\/a>\u00a0and look for products that support their Linux distribution of choice.<\/p>\n Nowadays, companies are not only advised to protect their customers\u2019 sensitive data but are increasingly required to do so by law. Everywhere, from the\u00a0US<\/a>\u00a0and\u00a0Japan<\/a>\u00a0to the EU and its notorious\u00a0General Data Protection Regulation (GDPR)<\/a>, organizations face fines at every corner if they are found to be negligent in taking the necessary measures to protect sensitive information.<\/p>\n Companies choosing Linux must therefore be aware that, despite the myths that paint Linux as an invulnerable operating system, it is, like all software, subject to vulnerabilities that can be exploited by outsiders and, more worryingly, can easily fall victim to the biggest threat to data security of all: plain human error.<\/p>\n Looking for a Data Loss Prevention solution? Check our\u00a0DLP for Linux<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Linux has come a long way since its humble beginnings as Finnish student Linus Torvalds\u2019 pet project. With over 27.8 million lines of code to its name and its rise as the OS of choice for servers, public cloud, and supercomputers, Linux has earned an unmistakable spot among the top operating systems in the world … <\/p>\n1. Because it\u2019s open-source, Linux is more secure<\/h2>\n
2.There are no Linux viruses and malware<\/h2>\n
3. Linux makes data protection a breeze<\/h2>\n
Data security is no longer optional<\/h2>\n