Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
52 views

Protect public directories from download via wget and curl

My users upload their profile images and I save them in a public folder. The file names are not predictable (they are based on md5 hash of user id with salt). When someone views the user's profile, ...
25
votes
8answers
5k views

Block employee access to public cloud

First of all, let me state that this is not my idea and I don't want to discuss whether such an action is reasonable. However, for a company, is there a way to prevent employees to access public ...
2
votes
3answers
174 views

To add security to SSH-keys from Man-in-middle-attacks [closed]

I would like to get Mobile-phone verification or something else besides the SSH-key verification. How can you add defence to the SSH-keys?
0
votes
1answer
47 views

Is a VPN right for restricting server access?

I would like to set up a Few QA servers for a web application, under the app domain, however I would not like these servers to be accessible to just everyone from the Internet. Ideally, the QA team ...
2
votes
3answers
251 views

Docker: How to partition a large server?

So I have a Dell XS23 Rack with 8 CPUs and 40G Ram with vmware esxi in my production environment. The way I'd partitioned it before was 2 API servers (quad core, 8gig ram) 2 DB servers same specs, ...
2
votes
2answers
103 views

What are the security issues in creating a firewall between two subnets?

As I understand it, the hosts on different subnets cannot communicate with each other unless there is a router somewhere on both subnets that forwards traffic between them. I have have two subnets ...
-1
votes
1answer
42 views

Site security - how to filter incoming traffic to a specific port

Just ran a security test on ScanMyServer.com, the results showed a medium risk vulnerability: Database Reachable from the Internet Summary: The remote host is running a database server that is ...
0
votes
1answer
51 views

DDoS Attack Mitigation Techniques [duplicate]

Our hosting is set up on Amazon EC2 servers, which have been performing great. The problem we run into are spikes in requests for invalid URLs from scripts/bots looking for security holes. When ...
1
vote
0answers
30 views

Dynamics Business Portal [closed]

I have installed SharePoint 2010, Dynamics Business Portal Version 6.0.1053.0. When I try to log on to the BP site I get the error given below: ...
1
vote
1answer
87 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
0
votes
1answer
39 views

removing process (and child process) access to file systems? [closed]

is there a unix-type free OS that allows me to remove all disk access for a specific process and any of its children? #!/usr/bin/perl -w use strict; use Perl6::Slurp; my $infile= ...
1
vote
0answers
31 views

Won't keychain --clear in .bash_profile interfere with cron jobs?

Keychain tutorials recommend adding /usr/bin/keychain --clear to ~/.bash_profile to only allow cron jobs to use passwordless login. I'm not sure I understand how this works. If I take it right, the ...
0
votes
0answers
61 views

Why AD DS user is able to write to ADLDS(ADAM) container(user is neither imported nor added as foreignsecurityprincipal)?PS/dsacls cmd to fix it-DENY

I have installed 'AD LDS' instance on one of my windows server 2012 which is part of a domain. I brought few users (windows security principals to 'AD LDS') as 'ForeignSecurityPrincipals' from AD DS ...
0
votes
1answer
50 views

Is the following setuid program a security risk?

I have the following program in .c set as setuid chmod only read/execute by owner and will set it immutable, as i will the php script it invokes. #include <stdio.h> #include <stdlib.h> ...
-2
votes
2answers
221 views

List of TCP & UDP ports known to be used by malware, etc [closed]

Where can I find a regularly updated, downloadable list of TCP & UDP ports that are known to be commonly used by malware, trojans, etc.? This is for import into an IT asset management system to ...
1
vote
1answer
139 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
1
vote
1answer
49 views

Logging in iptables

I have created rules in iptables to log and edited the rsyslog.conf file to output any message which contains "iptables" to a different log file. It seems that it is logging to both places, the ...
1
vote
2answers
345 views

Web server atack DDOS

I have a server (vps) to use as a repository and testing (gitlab and redmine) server. However apache crashed, seeing the /var/log/apache2/error.log have many errors of this type: [Fri Jan 31 ...
1
vote
0answers
205 views

Firewall/iptables rules for GlusterFS

A great pleasure would be to know which exact iptables rules to use for securing GlusterFS 3.4.2 (with Debian Wheezy) in shared environment. I'm running some dedicated servers at ISP. There are two ...
1
vote
2answers
118 views

What is the difference between /etc/hosts.allow and denyhosts' /var/lib/denyhosts/allowed-hosts?

Put another way, why doesn't denyhosts simply reference /etc/hosts.allow? Why does it have it's own file? Some of the denyhosts tutorials you see instruct the user to add their management IPs to this ...
7
votes
1answer
140 views

what is the usefulness of logging of martians packet

Most of the time when I perform any search on hardening of a linux box etc, in the list there is always a section of log of Martian packet(IP) without any further explanation. ...
1
vote
1answer
218 views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
1
vote
1answer
53 views

Defending PCs against APTs

We are evaluating the security of the PCs used by people with access to high-value company documents. At the moment they are kept patched and run a virus checker, but we are concerned about zero-day ...
1
vote
1answer
57 views

SMB 3 encrypted over internet

SMB 3 offers an option to enable encryption. Does that mean it would be a possible option to let people use SMB over the internet or are there other not securable aspects about SMB left? What extra ...
2
votes
2answers
146 views

With Azure, can I create a VLAN and put all my worker roles and VM's in there?

Is it possible to create a sort of VLAN or private azure LAN thingy .. where I can put any new Workers or VM's in that VLAN? one of the reasons is because I was hoping to create a SQL server on a VM ...
1
vote
1answer
83 views

Securing PHP on Ubuntu 12.04 LTS?

I recently set up an Ubuntu 12.04 server (with Apache 2.2 & PHP 5.3.10). While I was testing it, I noticed in the Apache access logs that an unknown IP address was trying to perform a PHP CGI ...
3
votes
2answers
118 views

Mongo Sharding - Config Server and Mongo Authentication

I am needing to shard a database fairly soon, and am unclear on what the best practice is for enabling authentication on the mongos and config servers. I would like to have everything be secured with ...
0
votes
3answers
54 views

Limiting the connection source in firewall

I'm new at server management, and wrote an IPTables script for firewall. I'm very concerned about the security of my server, and thus I'm wondering about something that I read often from people using ...
1
vote
1answer
403 views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
0
votes
2answers
77 views

Control IP to access a server , which use iptables

I would like to use linux command iptables to control to only allow the same subnet IP to access a server , what I would like to do is to allow any services from 10.168.1.0 to this server , could ...
0
votes
1answer
121 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
-1
votes
1answer
31 views

Nginx, deny access to certain url

I have a url shortening website. The url shortening is done by PHP. I need to restrict access to certain urls. This means certain url should be blacklisted for shortening. Is there any server side ...
0
votes
1answer
245 views

Why is OpenVZ less secure than KVM and XEN [closed]

I've read many forums and blogs and articles comparing OpenVZ, KVM and XEN. And I have seen many times that one of the negatives of OpenVZ is that its less secure. However, I have yet to see an ...
1
vote
1answer
29 views

How do I audit where security groups are applied in my domain? [closed]

I've been asked to find out how and where specific security groups are being used in my organizations AD domain. I know what the groups are and where to find them in the directory, but I don't know ...
0
votes
0answers
28 views

Setting permissions for RDP security settings via Group Policy

Is there any way to set settings from the Security tab for a connection in Remote Desktop Session Host Configuration via group policy? I have discovered how to do it via the WMI class ...
0
votes
1answer
52 views

Mount a Symlink Directory to Document Root for Deployment

Trying to establish a secure multiuser environment with limited user permissions and automated deployment. The example has been made simple to express the idea. Docroot: ...
0
votes
0answers
11 views

How to create a very low-level Application Pool account?

I want to create a very low-level application pool account which only allows to run some code, specifically RazorEngine. I don't want user can read/write files and use some dangerious code to down the ...
-2
votes
1answer
64 views

run as administrator has more permissions than SYSTEM

I have a Windows service that I can run either as a service or in a console. The program requires administrator access. When running in a console "as Administrator", the program works fine. When ...
1
vote
3answers
60 views

do I still need to block attacks on my server once I lock it down by ip?

I have a public dedicated server that clients log in to via RDP. I am using rdpguard to block bad RDP logins attempts on my server. Recently, I locked it down to only allow specific IP addresses ...
0
votes
1answer
64 views

What are the security benefits of using a proxy server?

In Wikipedia is written: Security: the proxy server is an additional layer of defense and can protect against some OS and Web Server specific attacks. However, it does not provide any protection ...
3
votes
1answer
30 views

Being notified when Python security updates are made

I maintain a few Python-based web apps. I need to be notified immediately when new Python releases are made, especially micro level releases that fix security issues, so I could update my sites to use ...
1
vote
2answers
98 views

Suspicious Login Success in Event Viewer

Hope you can help. We have been noticing another user's local machine creating logon entries in the event viewer of our machine. The message received is "An account was successfully logged on". The ...
0
votes
2answers
99 views

Encrypt Windows Backup

Is there a way to encrypt my backups using Windows Backup in Server 2008 R2 without using a paid for 3rd party application? I've searched high and low but have been unable to find anything. Thanks ...
0
votes
1answer
42 views

How to restrict a Linux program's permissions

I'm running a native linux program from PHP using shell_exec. Specifically, calling antiword to extract text from Microsoft Word files users uploaded. However, as I've got no way of assessing ...
1
vote
2answers
64 views

Quarterly external vulnerability scans, IPs to include

I have questions regarding the PCI DSS requirements for quarterly external vulnerability scans by an ASV, specifically what public IPs I need to include in these scans. The organization is a retail ...
0
votes
1answer
832 views

mod_security configuration issue: Error parsing actions: Unknown action: ver

I am trying to install / configure mod-sec using this tutorial, which uses the OWASP ModSecurity Core Rule Set. However when I go to restart apache, I get the following error: Syntax error on line 53 ...
0
votes
1answer
74 views

How to configure fail2ban so it bans login attempts based on the structure of the attempted password or username

I want to set up two filters for fail2ban: If the user tries to login with a password that is less than 10 characters ban them. And if the user tries to login with a password that is more than 10 ...
0
votes
1answer
280 views

How do I install OSSIM (Alientvault SIEM) manually?

AlienVault by defult is a .iso image. It installed on the core of Debian. I want to install it on Ubuntu 12.04. How can i do that?! Or is it possible or not?! (AlienVault is a SIEM product, it is an ...
1
vote
1answer
310 views

Can a windows service running with network service or local system account, updated active directory container?

I have two windows services (one running as network service and the other as local system) - because of some architecture reasons these cannot run under domain user account. And there will be a store ...
2
votes
2answers
169 views

Securing Windows Firewall connections for Windows Server 2012

I have Windows Server 2012 at Amazon EC2 in non-domain environment. I need to remote desktop into it and also connect to Microsoft SQL server instance running on it. In addition to opening these ...