P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Servers

File server (SMB server): what it is and how it is attacked

Holds shared documents everyone can reach over the network.

Also known as

  • SMB server
  • network share

Typing any of them into the editor finds this object.

Why it matters on a security diagram

Broad access by design, which is why ransomware reaches so much of an organisation through it.

How it gets attacked, and what reduces it

How it gets attacked

  • Shares open to everyone rather than to a specific group
  • Used as the route to reach many machines at once

What reduces it

  • Grant shares to named groups, never to everyone
  • Keep previous versions and snapshots under separate credentials from the live data
  • Limit how much one workstation account can reach, since that is the path encryption takes

Where it sits

Group
Servers · Machines that run something for other machines.
Whose side, by default
Ours · Belongs to the organisation the diagram is about.
Catalogue identifier
file-server

Reviewed . CC BY 4.0.

Others in servers

The servers group lists all 13 of them side by side.

File server on your own diagram

Open the editor, press N, and type SMB server. The object is placed and connected to whatever was selected, and Tab adds the next one already joined to it. Nothing is uploaded: the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.

Open the diagram maker