Solved

How can I secure my site's member information

Posted on 2004-09-24
2
218 Views
Last Modified: 2010-04-11
Hi,

I have a web site where visitor can register for free and I would like to secure their information when they log in to their account.  I'm using ASP and MS SQL 2000.

I want to make sure that no one will be able to see my site member information neither stolen it while communicating with the server.  How can I do that?
0
Comment
Question by:otaibis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Accepted Solution

by:
jhilving earned 50 total points
ID: 12145423
You need to consider your obvious vulnerabilities. You said you are running WEB and SQL….there are your primary risks upfront.

Do you require other servers to attach to your SQL server? If not then don’t let them…firewall or ACL anyone but your server to attach to the SQL Server.

As far as Web traffic you can’t shut this down or your site will not work…obviously. Therefore make sure you have follows ALL the security steps for your server. Also keep a strong eye on your web server log files, if neglected failed hack attempts may never get the attention they need until it is too late.

General server security, make sure that you know what is listening on your server. I like to remotely scan my servers using nmap, http://www.insecure.org/nmap/, to get a feel for what is open or not. It sucks to have some application like FTP or TFTP running where you did not know or forgot; it would be like leaving a window in the basement unlocked that you forgot was there or did not know. Always ACL or Firewall ALL ports except those that are needed to be accessed.  Patch, Patch, Patch! NEVER neglect to patch any updates on your server. Get them done as they come out…do not wait because “others” are hoping you do!!

Good Luck!!
-J
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 12154025
after you have done all your network firewall works, you need to check your web application security.
Vulnerabilities to checka are:
  - Cross-Site Scripting
  - SQL Injection
  - Path Traversal
  - Enumerations
  - Buffer Overflows
  - logical and semantic flawas in your application
etc. etc.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of you may be aware of the recent Google Docs scam emails that have been floating around coming from various people that you know. Here's a guide on identifying How To Identify the Scam Email You will see an email from someone you’ve had co…
Article by: Justin
In light of the WannaCry ransomware attack that affected millions of Windows machines, you might wonder if your Mac needs protecting. Yes, it does and here is how to do it.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Suggested Courses

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question