Solved

How can I secure my site's member information

Posted on 2004-09-24
2
216 Views
Last Modified: 2010-04-11
Hi,

I have a web site where visitor can register for free and I would like to secure their information when they log in to their account.  I'm using ASP and MS SQL 2000.

I want to make sure that no one will be able to see my site member information neither stolen it while communicating with the server.  How can I do that?
0
Comment
Question by:otaibis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Accepted Solution

by:
jhilving earned 50 total points
ID: 12145423
You need to consider your obvious vulnerabilities. You said you are running WEB and SQL….there are your primary risks upfront.

Do you require other servers to attach to your SQL server? If not then don’t let them…firewall or ACL anyone but your server to attach to the SQL Server.

As far as Web traffic you can’t shut this down or your site will not work…obviously. Therefore make sure you have follows ALL the security steps for your server. Also keep a strong eye on your web server log files, if neglected failed hack attempts may never get the attention they need until it is too late.

General server security, make sure that you know what is listening on your server. I like to remotely scan my servers using nmap, http://www.insecure.org/nmap/, to get a feel for what is open or not. It sucks to have some application like FTP or TFTP running where you did not know or forgot; it would be like leaving a window in the basement unlocked that you forgot was there or did not know. Always ACL or Firewall ALL ports except those that are needed to be accessed.  Patch, Patch, Patch! NEVER neglect to patch any updates on your server. Get them done as they come out…do not wait because “others” are hoping you do!!

Good Luck!!
-J
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 12154025
after you have done all your network firewall works, you need to check your web application security.
Vulnerabilities to checka are:
  - Cross-Site Scripting
  - SQL Injection
  - Path Traversal
  - Enumerations
  - Buffer Overflows
  - logical and semantic flawas in your application
etc. etc.
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Ransomware is a malware that is again in the list of security  concerns. Not only for companies, but also for Government security and  even at personal use. IT departments should be aware and have the right  knowledge to how to fight it.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question