Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

We have developed Game for Facebook platform. We have several Gaming Web Server, Memcached Server & MySQL Server.

Here we have to work with facebook Payment API.

We need to secure enough our Gaming Web Server, Memcached Server & MySQL Server.

  • We have SSL Certificate
  • We Monitors Logs Everyday

Is those enough, or any suggestion from you please?

share|improve this question

2 Answers 2

up vote 4 down vote accepted

I would make sure you have these things:

These solutions will significantly reduce the chance of a succesful attack by scanners etc. To have reasonable assurance you should also invest in a pentest.

Now since you have different servers, you should have frontend and backend servers. The backend can contain your MySQL servers since no users should have direct access to them.

share|improve this answer
1  
+1 for Nice Answer. Also like the sentence "you should have frontend and backend servers. The backend can contain your MySQL servers since no users should have direct access to them." –  Md. Mahbubur R. Aaman Nov 16 '12 at 9:41
1  
Would you explain details "Host Based Intrusion Detection system" ? –  Md. Mahbubur R. Aaman Nov 16 '12 at 9:42
    
@MahbuburRAaman check the link I added to the answer. I think the guys of OSSEC can explain it a lot better than me. –  Lucas Kauffman Nov 16 '12 at 21:40
    
Lucas Kauffman, Thanks a lot. –  Md. Mahbubur R. Aaman Nov 17 '12 at 2:30
    
Depending on the amount of logs and your budget a tool like splunk to analyse logs can be interesting too –  Lucas Kauffman Nov 17 '12 at 6:23

I think you first need to look at the basics, such as having good firewall rules, keeping your software up to date etc. But this is the case with any server.

More specifically for you, my guess would be that the code for your game would be the most likely entry point for people who are up to no good. Examples are XSS, SQL injections etc. This is what i would focus on. If you work in a team, check eachothers code to make sure that the number of possible security holes is reduced as much as possible.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.