PDA

View Full Version : Web server: security



robinhood12
Aug 26th, 2010, 08:14 AM
Web server: security

Basic Web Security
There are some basic security rules you need to keep in mind when securing your Web server.
* Passwords
Keep your Web server password secure, don't share it with other people (or write it down), and follow good password security. Your password should not be a word found in any dictionary, should include both letters and non-letters, use different cases, and be more than 6 characters long. An easy way to remember a good password is to think of a sentence and use the first (or last) letters and punctuation as your password. The number 2 for "to", 3 for "the", and so on.

* Security through Obscurity
Never think that because your domain is small, your site is about an obscure topic, or you get few hits, you're not vulnerable. There are tools that allow crackers to poll the
Internet for new IPs and they will attempt to break in within hours of your site going up.

Thanks

joseph00
Aug 27th, 2010, 09:30 AM
Hi

If a database server, such as Microsoft SQL Server is to be used as a backend database, install it on a separate server. If the budget permits, other network services should be installed on separate servers. If one of such network services is compromised, it makes it more difficult for a malicious user to gain access over the other servers, thus compromising the whole web farm infrastructure. Also, if possible, avoid mapping virtual directories between two different servers, or over a network.

Thanks

warn99
Aug 28th, 2010, 09:46 AM
Hi

Administering critical resources has never been more difficult that it is today. In a changing world of software innovation where major changes occur on a daily basis, it is crucial for the webmasters and server administrators to shield their data against an unknown arsenal of attacks in the hands of their attackers. Up until now this kind of defense was a privilege of the few, out-budgeted and low cost solutions let the defender vulnerable to the uprising of innovating attacking methods

Thanks

sanseo
Sep 25th, 2010, 05:02 AM
if you using cpanel than Installing CSF firewall on cPanel ...