WDD - LO1 - MANAGE SECURE SITES

-
1. Keep the Software Up to Date

Always keep the website to be up to date so that no hacker will not easily access onto the information from the web server.
- Need to keep the website up to date so that to protect it from getting new threats.

2. Block SQL Injection

SQL injection is an attack which vulnerable on bypassing the security of the website application. By inputting validation and limiting the queries can prevent the SQL injection attacks.
- adding of codes to the database with a proper language

3. Prevent XSS

Cross-site Scripting (XSS) will manipulate the vulnerable website into a malicious code for the user and when it is executed, the attacker can access and interact with the user's application.
- Client-side
- the attacker create a script or code to bypass the security of the application.

4. Providing Minimal Error Messages 

Creating a least error messages for the website to be secured so that the information of the website will not be lost. such as Error 404 and File Not Found.
- unique characters
- example like username already exist, invalid password

5. Server Side Validation/Form Validation 

Form validation can help the users to make sure on filling out the forms in the correct format so that the data that is submitted can be carry successfully with the web browser.
- two types of validation
 - client-side validation
 - server-side validation

6. Passwords

Setting up a strong password such as combining characters, numbers and symbols into one code can make it difficult for the hacker to access onto the user's account of the website.
- to prevent the hackers on guessing the password easily. if they know the password, the hackers can change the website or steal information of the website.

7. Denying File Uploads

This means that uploading the files onto the website is denied so this can prevent the user from transferring an unknown files onto the website.
- example user can upload a virus onto the website.

8. HTTPS

HTTPS is encrypted for increasing the security of the user when transferring the data such as log in to the Email account.

9. Website Security Tools

Website security tool is an application which is used for identifying and also removing malware of the website.
example - scanning virus daily





https://developer.mozilla.org/en-US/docs/Learn/HTML/Forms/Form_validation
https://portswigger.net/web-security/cross-site-scripting
https://blog.hubspot.com/blog/tabid/6307/bid/33766/10-clever-website-error-messages-from-creative-companies.aspx
https://www.acunetix.com/websitesecurity/sql-injection/
https://www.cloudflare.com/learning/ssl/what-is-https/
https://cwatch.comodo.com/blog/website-security/what-is-web-security/

Comments

Post a Comment

Popular posts from this blog

WAN Technology

-
Image
MPLS Describe MPLS is stands for Multiprotocol label switching which is a mechanism used inside the computer network infrastructures to speed up the time it takes a data packet to flow from a node to another. Diagram How it works In MPLS , packets are directed through the network based on an assigned label with original IP routing in a packet- switched network, each data packet could determine its own path through the network. Examples Traffic engineering network management ATM Description ATM is a technique for packet switching that is used by telecommunication networks which they used asynchronous time-division multiplexing to encode data into small fixed sized cells. It is known as Asynchronous Transfer Mode. Diagram How it works The sender and receiver on a network creates a fixed channel between each other before sending the data and then the information will be sent in order. Example It is used in the campus backbone. References Tech...
Read more

LO3 - Know the features and functions of information systems

-
3.1 Features of Information Systems An information system has 5 parts: Data Raw information The data input to the system must be accurate It should be stored in logical way such as pen drive and hard disk. People People are involved both in capturing the data and manage the information. Hardware Management information system (MIS) may run on just the sales and finance director's PC. It usually runs on a server, either shared or dedicated with Internet or intranet access for those who need it. Used for storing data. It is unusual to require specialized hardware. computer and server Software MIS can be built using standard software. manage the information in the computer. Telecommunications To connect with the use of internet. MIS are delivered across an intranet within a company's firewall for protection from competitors and others seeking this valuable management information. Used to protect and secure the data. 3.2 Functions of Information Systems ...
Read more