Solved

How can I secure my site's member information

Posted on 2004-09-24
2
212 Views
Last Modified: 2010-04-11
Hi,

I have a web site where visitor can register for free and I would like to secure their information when they log in to their account.  I'm using ASP and MS SQL 2000.

I want to make sure that no one will be able to see my site member information neither stolen it while communicating with the server.  How can I do that?
0
Comment
Question by:otaibis
2 Comments
 
LVL 2

Accepted Solution

by:
jhilving earned 50 total points
ID: 12145423
You need to consider your obvious vulnerabilities. You said you are running WEB and SQL….there are your primary risks upfront.

Do you require other servers to attach to your SQL server? If not then don’t let them…firewall or ACL anyone but your server to attach to the SQL Server.

As far as Web traffic you can’t shut this down or your site will not work…obviously. Therefore make sure you have follows ALL the security steps for your server. Also keep a strong eye on your web server log files, if neglected failed hack attempts may never get the attention they need until it is too late.

General server security, make sure that you know what is listening on your server. I like to remotely scan my servers using nmap, http://www.insecure.org/nmap/, to get a feel for what is open or not. It sucks to have some application like FTP or TFTP running where you did not know or forgot; it would be like leaving a window in the basement unlocked that you forgot was there or did not know. Always ACL or Firewall ALL ports except those that are needed to be accessed.  Patch, Patch, Patch! NEVER neglect to patch any updates on your server. Get them done as they come out…do not wait because “others” are hoping you do!!

Good Luck!!
-J
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 12154025
after you have done all your network firewall works, you need to check your web application security.
Vulnerabilities to checka are:
  - Cross-Site Scripting
  - SQL Injection
  - Path Traversal
  - Enumerations
  - Buffer Overflows
  - logical and semantic flawas in your application
etc. etc.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
How do we balance the user experience (UX) with reasonable security measures? It can be done, if you keep these fundamentals in mind.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question