Tag Info

New answers tagged

1

Here 6 key steps : 1 - Secure your application code 2 - disable all modules not used. Try to disable all, and then, one by one, add modules. 3 - remove all scripts and backup files in the web folder. 4 - disable directory listing 5 - use modsecurity to protect your application from application-level attacks. 6 - Use Fail2ban to trigger HTTP errors ...


0

User's Security You are missing one extremely important thing: CSRF mitigation. Be sure to fully understand the related problems. Tldr: in addition to the authorization token (e.g. session cookie), you need a challenge per action to identify if the action is intended by the user or unintended. Fix JSONP leaks. X-Content-Type-Options: nosniff, on all ...


0

Full documentation on the latest version of OSSEC is here: http://ossec-docs.readthedocs.org/en/latest/index.html The documentation is a little light and I found I had to do a lot of trial and error to get it to do exactly what I wanted. My recommendation, especially if you're new to the software, would be to download the Server Virtual Appliance here: ...



Top 50 recent answers are included