Remote backup service security

November 30, 2008

One of the most important factors choosing a remote backup service is security. Imagine when you are trying to restore a system from a backup, but there is no backup – the backup files were deleted by a hacker.

This may happen with anyone and you can never be sure your data is 100% safe. Well you can if you disconnect the server or device holding your backup data (we do not review physical aspects here) and it can’t be accessed remotely.

Over 80% of online backup services provide you a backup space were you can upload your data using FTP, rsync, SCP or any other method. You are initiating the connection with a specific software or a script. Now when your server or workstation is compromised a hacker can access the programs or scripts that uploads data to a remote backup service, login there and delete your data.

The best way would be for you to use a backup service company that initiates a data transfer from their remote backup servers (using scp scripts or RSYNC over SSH) – your server doesn’t have a direct access to backup data directory. So when your server is compromissed (hopefully it never happens) no data can be deleted from a backup service because unauthorized person can’t access the remote system.

Leave a Reply