New answers tagged

1

If you distinguish between web server, application server and database then you actually mean front end, business logic and back end (storage). This is also called a multi-tier architecture with presentation tier, application tier and data tier. In this case the application server will not simply pass through any requests from the web server but only allow ...


1

Well, the obvious question is - can the External Database access resources on the network the Internal Database is on? If the External Database is isolated from the LAN, then that means that an attacker that ends up getting not only into the External Database's records, but also to the External Database's host OS, is unable to get farther into the network. ...


3

There are situations where an external-facing database is used to store temporary information which is "pulled" not "pushed" through a one-way firewall connection into a larger internal database then that data is deleted from the external-facing one. The purpose for this is to reduce the number of records which can be stolen at any given time yet allowing ...


-1

You've not specified what SQL your using. Keep in mind that Microsoft SQL Server will only execute onto Windows operating system. I'll make the assume that your using Windows Server and Microsoft SQL Server. Firewall: Blocked all connections. Allow port 1433 (SQL TCP) for your computer which talks to SQL only Allow port 1433 (SQL UDP) for your computer ...


0

I'm with TesselatingHeckler that you should really think twice about this because making a big project with half-assed copy pasta solutions in server and SQL is really a bad idea. You can read up the information necessary but as said, its just really broad. You should probably start with the database as this is the most critical part of an application and ...


0

For securing a server you can follow the TCP/IP Model for trying to have the most secured system possible. With this model you will apply the principe of secure in depth and you will apply a secured principe on each layer of the model. Example: If your SQL server talk with only a few servers in the same local network you can do a static ARP table with ...


1

Mongo database connections will be able to use SSL at some point in the future, but that isn't available yet. Writing to have a more recent reference for this one. From https://docs.mongodb.org/manual/tutorial/configure-ssl/ New in version 3.0: Most MongoDB distributions now include support for SSL. ... Certain distributions of MongoDB do ...


0

Are PreparedStatements sufficient? PreparedStatements are not sufficient on their own. You should step through your code and ask yourself what is necessary, and what is possible. Step through on both the client and the server side, and see what data gets sent, if it's possible to modify it, and what it does. See what things you can do. I can't see the ...


0

Your code handles the SQL insertion correctly. I have two guesses about the attack: The attacker could have repeated the request several times, and your code doesn't check if it has already downvoted the post. The attacker have sent a lot of downvote requests in a very short period of time, allowing him/her to exploit a time of check / time of use race ...


2

encrypt a connection between an application server and a database I think you should just establish an IPSEC tunnel between the database server and app server. This will provide you both confidentiality and integrity. (ESP + AH) Configuration Reference


4

It is important to understand that certificates provide integrity and encryption provides confidentiality. In other words; the certificate makes sure that you are talking to who you think you are (if part of chain of trust), but it does not encrypt your connection. However integrity and confidentiality nearly always go hand-in-hand, which is why the public ...


0

If you control both servers, you donĀ“t even would really need to use certificates, just setup on each side the trusted public key for the other side and use that to stablish a SSL/TLS like connection. However, probably the easiest way of doing this is really using SSL/TLS and certificates, just because this is the only way you will be able to setup such a ...



Top 50 recent answers are included