Traditional security defenses that would have failed against sophisticated attacks like the one against Target are still necessary in protecting small businesses, experts say.