-12
votes
0answers
44 views

What is the latest cyber threats in network security in IT industry? [closed]

I would like to know the latest cyber threat in network security in wireless as well as router
0
votes
1answer
29 views

Restricting access using IP address / Network Redirection?

I have a situation where we have a web server (lets call it A) that is hosting a set of HTTP based services. Due to some client requirements, this web server is not open to the outside world but ...
0
votes
0answers
53 views

Hardening of ubuntu server.How to prevent overkill checks? How to detect genuine request from attacks?

I have followed one these hardening check list tutorials where I have noticed that there fail2ban installed and denyhost at the same time. To my knowledge fail2ban does a little more than what ...
0
votes
0answers
31 views

How vulnerabilities in the Java affects application running in Tomcat/JBoss

I wonder what impact has Java vulnerabilities on application in Tomcat. For example Java 1.6u45 has many reported security bugs (Remote Security Vulnerability). You can easily exploit it on client ...
0
votes
1answer
54 views

Protect public directories from download via wget and curl

My users upload their profile images and I save them in a public folder. The file names are not predictable (they are based on md5 hash of user id with salt). When someone views the user's profile, ...
1
vote
2answers
284 views

Google searches in my apache access logs?

I'm quite familiar with the idea that of bots are probing my server for vulnerabilities, but today when I checked my access logs, I noticed a bunch of google searches appearing in the logs. What ...
1
vote
2answers
470 views

How can I block a malicious port scanner currently running on my server? [duplicate]

I'm currently attempting to clean and secure a server that has pnscan running on it. This instance of pnscan was installed by an outside party most likely to use our server as part of a port scanning ...
0
votes
0answers
133 views

ADFS Transform Claim Rule in Claims Provider Trust

I have an ADFS 2.0 server acting as a Federation gateway (SP-STS) between my claims aware web application and an external identity server (IP-STS). I have: A Claims Provider Trust (CPT) set up with ...
1
vote
2answers
343 views

Locating Rogue Perl Script

I've been trying to source the location of a perl script which is causing havoc on a server which I control. I'm also trying to find out exactly how this script was installed on the server - my best ...
2
votes
1answer
131 views

Beast / CRIME / Beach attack and stopping it

I have read so much on all this but not entirely sure I understand what has gone on. Also, is this one, two or three problems? It looks to me like three, but it's all very confusing: Beast CRIME ...
0
votes
2answers
595 views

how to enable TLSv1.1 and TLSv1.2 on nginx Debian squeeze?

For security I have to setup a nginx server with TLSv1.1 or TLS v1.2. By default, nginx configuresTLSv1. Reading the documentation I see that nginx has to set the following directive: ssl_protocols ...
0
votes
2answers
128 views

How can we restrict access to a web service to specific client computers?

We have a web application (Apache/PHP) that currently uses username/password authentication and is currently accessible from anywhere. It has server-side SSL enabled. Our client program is a version ...
0
votes
1answer
390 views

How can I setup an IP whitelist for a subdirectory?

A client of mine complained of an attack. I checked the access log and found a massive number of requests for the admin login page from seemingly random IP addresses. I created an .htacces file in the ...
0
votes
1answer
88 views

file permissions for scripts that need write access

This question helped me quite a bit: What's the best way of handling permissions for apache2's user www-data in /var/www? I would like to take the above question further, I want to be able ...
0
votes
1answer
60 views

Securing nginx (user/file permissions)?

I'm just setting up nginx on my web server, and I created a user account for it to use (nginx). However, it runs its worker processes by default as www-data. Is there any disadvantage to using ...
0
votes
1answer
77 views

Tomcat vulnerability patching

I had a tomcat vulnerability scan in my linux server and report came as Important: Authentication bypass and information disclosure (CVE-2011-3190) .My apache tomcat is of version 6.0.24. tomcat ...
0
votes
2answers
192 views

Webhosting on virtual sever vs physical server: Security vulnerability

In comparison to a physical server, is there any special security vulnerability in virtual servers for purpose of hosting several websites? For example, can the fact that there is not any hardware ...
1
vote
3answers
376 views

Possible DNS hack or Unknown reason causing some users to redirect to a porn website?

I have website, which is a very popular website, but from last two weeks several customers complain to me that my site was hacked and redirected to a porn website, but whenever i check the website i ...
0
votes
1answer
91 views

How to connect to a SINGLE colocated server - is StrongSWAN sufficient?

I am thinking of colocating a SuperMicro 1022G-URF (16-way 1u server, 16 GB RAM) at a "place that does server colocation. I am running CentOS 6. The server will be a web server and an email server ...
2
votes
2answers
242 views

WebDAV Security and Hardening

What are the security ramifications that one should be aware of when considering using WebDAV? How does one go about securing it? What else should I know about it?
19
votes
8answers
2k views

How to prevent zero day attacks

Traditionally, all anti-virus programs and IPS systems work using signature-based techniques. However, this doesn't help much to prevent zero-day attacks. Therefore, what can be done to prevent ...
1
vote
1answer
431 views

Should Jetty always be behind another webserver (eg nginx, apache) to improve security?

For a long time I've always run nginx in front of jetty to do load balancing. However, I have a new project where I will be using HAProxy to do the load balancing and was wondering if I should have ...
-2
votes
1answer
50 views

How do I respond to a buffer/stack overflow [closed]

How do I respond to a stack/buffer overflow
0
votes
1answer
1k views

Is a local-only MAMP installation secure?

I just installed a basic MAMP server (on a Macbook Air 11" running OSX Lion) with no settings changed except for some php.ini things like "memory", "file_upload", etc that are more script related. I ...
4
votes
2answers
301 views

Attack on my web server - What could this mean

My provider informed that there is an outbound attack on my web server. On further inspection I saw this in my Apache error.log file: --2012-02-04 04:40:59-- ...
0
votes
1answer
173 views

Rule to block IP address not working

Looking at my Event Log I see that right now an attempt is being made at brute forcing my 'sa' user for Sql Server on my Windows Server web edition box. I know that firewall rules are not the only ...
1
vote
1answer
111 views

How to ensure my connection is secure to Google [closed]

Blogspot blogs are banned in Iran, they redirected to a page that says you can't access that site. But when I try to open a blog via HTTPS prefix I get this error: This is certification detail: ...
2
votes
1answer
204 views

How can I verify a client's identity using an SSL handshake to allow access to certain website pages?

I'm a programmer in the process of writing Web Services on a website for a specific client. These Web Service can only be accessed by this one client. They intend to send a client certificate over SSL ...
7
votes
1answer
2k views

Safest ciphers to use with the BEAST? (TLS 1.0 exploit) I've read that RC4 is immune

Now that the BEAST is public knowledge, TLS 1.0 is NOT safe to use (nor is SSL 3.0). I have seen reports that the RC4 cipher is unaffected (and is widely supported). Is that true? I know that TLS 1.1 ...
4
votes
3answers
1k views

SSL - should I just make my entire site secured?

I'm planning on building an application wherein my users can create accounts on it, email other users, etc. The site will also have forums, chat, etc. It will also need to process credit cards. I'm ...
4
votes
2answers
543 views

How to secure your Linux server from pass-the-hash attacks

I was just reading this article: http://www.infoworld.com/d/security/stop-pass-the-hash-attacks-they-begin-167997?page=0,2&source=IFWNLE_nlt_daily_2011-07-26 He talks about pass-the-hash attacks ...
4
votes
2answers
230 views

Security Flaw - Report it?

This may be a community wiki, I'm not sure. Imagine a scenario where you discover a security flaw in a company's website while browsing the web. Something involving a change to URL parameters that ...
1
vote
4answers
139 views

Do I need a hardware firewall for Win 2003?

We have had a Win 2003 server at a co-lo for a while. It is used as a web server and has a very cheap hardware firewall between it and the internet. Ports 3389 and 80 are the only ones forwarded to ...
9
votes
5answers
2k views

Why we need SELinux?

I could not get much idea where the SELinux has been used and what it saves from attacker. I have gone through SELinux web site and read the basic but still not getting clue about SELinux. For the ...
1
vote
3answers
431 views

How to secure a server physically and the software?

We are creating a web application that will be installed on a server and sold to a client, similar to a Google Mini Search appliance. We are looking at various ways to secure the server from being ...