Beefy Boxes and Bandwidth Generously Provided by pair Networks
go ahead... be a heretic
 
PerlMonks  

Re: Paranoid about web application security

by neniro (Priest)
on Aug 09, 2005 at 08:44 UTC ( #482139=note: print w/replies, xml ) Need Help??


in reply to Paranoid about web application security

What you wrote sounds good to me. I want to suggest to keep an eye on the network-security arround your app:
  • Use a (non-software) firewall to allow only needed traffic to your server.
  • Stop all unnecessary services on that box.
  • If mysqld is one of those services you could allow only connections from 127.0.0.1.
  • Use an intrusion-detection-system like snort.
  • Make someone responsible to do all security patches but remember to try those patches on a second box before you get hit by some nasty side-effects.
  • Continously keep an eye on the logs.
  • Plan the actions for a worst-case scenario!
  • Comment on Re: Paranoid about web application security

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://482139]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others cooling their heels in the Monastery: (5)
As of 2023-02-05 21:36 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    I prefer not to run the latest version of Perl because:







    Results (33 votes). Check out past polls.

    Notices?