Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. Resources Information security (Wikipedia article).
-3
votes
0answers
31 views
Effetiveness of fail2ban? [closed]
As a form of security I have setup AIDE on my centos 6.2. Then I read about fail2Ban should also set it up too? Please share your experience is that is a must and what other tips for security?
2
votes
0answers
19 views
How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability? [migrated]
Disclaimer: I'm not a sysadmin, please try to give your answers in developer friendly language ;)
I'm test scanning a fresh VPS image with Nessus and I'm getting plugin 58751. I tried figuring out ...
-2
votes
2answers
69 views
What steps should I take after my virtual server was compromised? [closed]
Possible Duplicate:
My server's been hacked EMERGENCY
I have a small virtual server running Ubuntu set up for the personal use of myself and a friend. The server runs Postfix and ...
4
votes
4answers
164 views
Should I harden my SSH if I only allow my IP in iptables?
I have several Linux servers without hardening the SSH:
Allow root logins
Use same password for all the servers
Use default ssh port 22
But I have setup iptables to allow only my own IP to SSH to ...
2
votes
1answer
42 views
Potential Bot-Net organizers probing for new machines?
I'm getting a number of exploit attempts from different IP's today.
GET ...
1
vote
2answers
41 views
Office network and guest network - manage with separate physical servers or a VM on the office server?
I have a beefy server (dual Xenon & 16GB RAM with RAID5) I use as the domain controller and file server for an office network on a dedicated internet connection.
I also have a guest network with ...
1
vote
1answer
26 views
How to restrict mysqlimport usage?
I have a need in my PHP application (using Zend Framework for what it matters), to import a CSV file into a MySQL database.
I currently do this by using shell_exec() to run a myysqlimport command ...
2
votes
2answers
23 views
WebDAV Security and Hardening
What are the security ramifications that one should be aware of when considering using WebDAV? How does one go about securing it? What else should I know about it?
1
vote
1answer
41 views
What is the safest way to set up SQL Server for remote access?
I'd like to be able to make my dev database server accessible over the internet. I and half a dozen dev applications will be the only users. I have a hosting account that includes SQL Server, but I ...
2
votes
6answers
108 views
How reliable are IP address-based firewall restrictions?
On some of my production systems that need to be accessible outside of the LAN I will sometimes add a firewall restriction at the edge to only permit traffic on, say, RDP from a specific origin IP ...
0
votes
2answers
18 views
Safely Execute Stored Procedure Via DMZ Server
I'd like to execute a stored procedure via web application that connects to SQL Server. The procedure is to be activated by clicking a link in an email. The link will have to be accessible from a ...
8
votes
0answers
157 views
Why is /dev/urandom only readable by root since Ubuntu 12.04 and how can I “fix” it?
I used to work with Ubuntu 10.04 templates on a lot of servers.
Since changing to 12.04 I have problems that I've now isolated.
The /dev/urandom device is only accessible to root.
This caused SSL ...
17
votes
8answers
1k views
How to prevent zero day attacks
Traditionally, all anti-virus programs and IPS systems work using signature-based techniques. However, this doesn't help much to prevent zero-day attacks.
Therefore, what can be done to prevent ...
1
vote
1answer
27 views
Securely mounting a Samba share from a VPS on a local machine
In my own little slice of the internet, I have a share that I want to serve up so I can mount it on my system at home and work with files as if they were local. I have this setup as a Samba share at ...
0
votes
0answers
14 views
Is it secure to use apache mod_mono with more virtualhosts?
I am using apache2 with mod_php and mpm_itk_module to run every virtualhost under its user. Now I am looking at mono (mod_mono) and I am not sure, if it is secure to run mono as only one process, whom ...
0
votes
2answers
55 views
Secure every connection between endpoints
Sometimes one has to work with software that hasn't built in security-features for non-local connections.
In fact, some client-libraries are sending credentials in clear text over the wire.
On the ...
-4
votes
1answer
48 views
Security Management
I have/am selected/considering PeerGuardian as my open-source system management application and I am trying to look into SECURITY MANAGEMENT ASPECTS of PeerGuardian. I'm looking into the research ...
0
votes
1answer
59 views
How to configure SSL with apache2/httpd mass virtual hosting using mod_vhost_alias
I have been searching quite a bit now but couldn't find any answers.
I'm using httpd 2.2.15 and Centos 6.2.
I have configured apache for mass virtual hosting. I.e.:
UseCanonicalName off
...
2
votes
1answer
48 views
Being Flooded with Security Event ID 4793 - Windows 2008 R2
I have a SQL server that is a domain member running Windows 2008 R2. It is a cluster node in a failover cluster. The security event log is getting flooded with these:
Log Name: Security
...
0
votes
1answer
52 views
Is it Possible to use a Single Certificate for a site which has many different domains
I have an ASP.NET application on IIS(Windows Azure) which has many different domains. All domains are working on http. Now, I need to use https. Whether, a single certificate is fine for all of my ...
1
vote
1answer
17 views
Dynamics CRM 2011 On-Premise & Security Certifications (ISO 27001, SAS70, etc)
I'm unclear on how to properly word our security status. The data center our hosted IFD CRM instance is running on has not paid for these audits. However, the Microsoft literature suggests that CRM ...
3
votes
2answers
66 views
Best way to secure tablets + other devices in a room [closed]
What's the best way to secure a bunch of Android tablets and other expensive devices in a room in an educational setting? For various reasons, physically attaching them to something is unideal. Is ...
0
votes
0answers
15 views
Security of standard CHAP over dialup
I am using an embedded dialup modem device that only supports CHAP authentication methods, not MS-CHAP, etc. My question is, how great is my security risk using CHAP? I am not aware of any easy ...
5
votes
5answers
417 views
Prevent linux from being replaced [closed]
This is somewhat related to physical security breach.
Consider a Linux server with all firewall and other security stuffs running in it. However, if someone gets physical access to the server, he ...
0
votes
2answers
38 views
Disable Server Login upon Updates Reboot
I have a co-located Dedicated Server running Windows 2008 R2.
It is a Live server running my sites (wordpress, joomla, etc)
I administer it via Remote Desktop.
Everytime I do the Microsoft OS ...
3
votes
3answers
65 views
how to limit the number of simultaneous processes per user in the system?
yep, i know that question was asked many times, but unfortunately i didn't find the complete answer on it.
so, how to limit the number of simultaneous processes per user?
i found two solutions:
...
2
votes
2answers
43 views
Does adding an user to the apache group creates a security hole?
Beginner question. I saw this mentioned on a website, considered a bad practice,but can't remember where and why. So, if I have an user which has access to files that Apache shouldn't have access, and ...
-1
votes
0answers
26 views
How to master linux servers configuration and security? [closed]
I was wondering if you can help me somehow in finding good topics and resources to follow up in order to improve my skills in Managing Linux servers.
Truth be told, I have some experience with ...
-1
votes
2answers
115 views
DDOS Attacks Explanation [closed]
I have some questions regarding the ddos attacks and how it really works , i really need some good explanation for it as i can't find any good reference that can help me .
Questions :
what are the ...
1
vote
1answer
33 views
How do I view Security Group rules for an AWS EC2 Security Group using the command-line tools?
I know that you can set Security Group rules with ec2-authorize and ec2-revoke. How do you view the rules of a given security group?
1
vote
1answer
48 views
Secure connection to MySQL with VPN?
I have a VPS with MySQL 5.5, which is listening only on localhost because of obvious security reasons. I have set up VPN connection from my own machine to that VPS and I connect successfully.
What ...
-1
votes
3answers
105 views
What is the best solution to protect communication between multiple servers?
I am using cloud servers and they are exchanging data. I would like to secure those exchanges.
I am using RackSpace and I am worried someone could just grap information between two of my servers.
I ...
1
vote
2answers
69 views
Linux - Counter Measure against Stress Tools
I have a VPS running Ngix and currently hosting a few websites. As you know VPS have low resource and the security measures should be done by client.
I just noticed many stress tools are out there ...
4
votes
0answers
58 views
Which linux x86 hardware keystore?
I'm terminating SSL/TLS in my DMZ and I have to assume that machine will be hacked.
At which point my certificates are compromised.
Previously I've used nCipher hardware keystore/accelerator to solve ...
-3
votes
2answers
29 views
How to lock tomato router to two ip's
Tomato firmware running on WRT54gl,
I want to lock down wireless traffic to two IP's (on the WLAN-side), all other target attemps from wlan should be blocked. How do I do it?
0
votes
1answer
31 views
Whats the best way to strip grave accents from bash scripts
I have a bash script which runs as root:
#!/bin/bash
/var/bin/svn_co -h $1 >> /var/log/svn/status.log
If the following should somehow occur, I'm in trouble.
/var/svn/hooks.d/post-commit -h ...
4
votes
5answers
151 views
Protect files on NTFS volume from Domain Administrators
We're a small company with a 2008R2 domain on which we have a file server with several shared volumes. We have a number of IT staff in the domain administrators role, because effectively we're all on ...
-2
votes
0answers
14 views
Can cyberoam log all the keystrokes in a network [closed]
Does standard cyberoam installation register all key strokes obtained in the network?
My college has one so will my password be availble to the admin of the cyberoam
0
votes
0answers
46 views
What permissions are required to copy folders with security attached on a NAS
What permissions does a user require to copy folders and the folders permissions from one mapped drive to another using explorer?
Our office has a large NAS with a number of shares. These shares are ...
0
votes
1answer
60 views
Logwatch httpd - hacks and probes
Sometimes in my daily logwatch report, I notice that there is a section under httpd for "attempts to use known hacks..." and another section about how many sites probed the server. I have a few ...
0
votes
0answers
29 views
More information on j_security_check
I am trying to find out more about j_security_check. I don't have much information about this servlet except for the fact that it is a form-based authentication that is built in by the applications ...
1
vote
1answer
79 views
What exactly is a Cloud Firewall?
Recently I hear a lot of the buzz word "Cloud" and I have even heard of Cloud firewall. But what I was looking for is if I implement Infrastructure as a service (IaaS) as a private cloud using ...
0
votes
1answer
32 views
Is there a way to limit the number of connection made by an IP address to my Windows Server?
Is there a way to limit the number of connection made by an IP address to my Windows Server?
I'm trying to restrict the number of connections used by a single IP address on my server
2
votes
1answer
106 views
Does PHP-CGI security issue (CVE-2012-1823) affect PHP running as regular users with mod_fcgid?
Does this PHP-CGI security issue (CVE-2012-1823) affect PHP when it's running under individual regular-user accounts with mod_fcgid?
The wrapper .fcgi script I've been using is:
#!/bin/bash
...
2
votes
2answers
42 views
Nginx equivalent to mod_security and related
I'm looking for a way to get my nginx to have reasonable abilities for auto-blocking various malicious requests.
E.g. since it doesn't serve any php scripts, any request for a php URLs that script ...
0
votes
2answers
76 views
Can an attacker remotely abuse a Windows 2008 server if he knows the username/password of a user included into “Users” group only?
There's a Windows 2008 server where there's a local user account with a known password - let it be user "dummy" and password "dummy1". That local user only belongs to "Users" group.
The attacker has ...
6
votes
1answer
69 views
Is there a way to force all cPanel users to change their passwords one time?
One of the cPanel servers I am running has constant troubles with compromised email accounts. I believe many of the users on this server have very weak passwords. I have increased the minimum password ...
0
votes
0answers
11 views
Is it okay from a security perspective to read foreign (untrusted) cookies in a trusted network? [migrated]
From a security point of view, is it okay to read foreign (untrusted) cookies (from 3rd parties on the Internet) on your internal (trusted) network, or should you only read them within the DMZ areas ...
0
votes
1answer
30 views
Securing Erlang / Ubuntu server
I have written a web service in Erlang using mochiweb and jiffy and now face the task of deploying it to production. Since it is going to be open to the public I was wondering how secure Erlang ...
1
vote
1answer
27 views
Allow one external client to use a NAT through ASA5510 Security Plus
I keep struggling with Cisco ASA.
How I can make a certain NAT (RDP, SSL or whatever) and secure it by allowing just one external client with fixed internet IP to make use of this NAT?
