Showing posts with label Advise. Show all posts
Hello Readers !!
Generally Unix and Linux base system are suitable for this kind of attacks. And works on scripts . When the core operating system or application is installed, the manufacturers distribute sample files and scripts so that the owner of the system can better
These system works and can use the scripts to develop new applications. From a developer’s standpoint, this is extremely helpful. The most of the people think that Why to create our own when you can use someone else’s script and just build onto it? In one of my jobs, I programmed and developed source code. Being able to use sample source code as a template helped increase the development time tremendously.
One of the main areas where there are a lot of sample scripts is in web development. The earlier versions of Apache web server and some web browsers came with several scripts and most of them had vulnerabilities. Also, a lot of the new scripting tools that come with web browsers enable developers with minimal programming knowledge to develop applications in a relatively short period of time.
In these cases, the applications work, but what’s going on behind the scene is usually pretty scary from a security standpoint. There is usually a lot of extraneous code and poor error-checking, which create an open door for attackers. Active Server Pages (ASPs) are a perfect example. Much of the early development that occurred with ASPs left a lot of backdoors that attackers are exploiting. An example is the default web msite that ships with IIS. It has the remote admin tools available from the main page. These tools can be used by an attacker to compromise a system.
Be Updated Be safe
cheers !!
Hello Readers !!
These attacks take advantage of the lack of security in today’s software.In the programming development cycle there are levels in which one of them is a security check level which is been ignored by the developers because they want to work more and earn more &
It also major problem with most software that is currently being developed is that the programmers and testers are under very tight deadlines to release a product. Because of this, testing is not as thorough as it should be. To add to this, the problem becomes worse since software that is being developed has so much added functionality and complexity that even if there were more time to test, the chances of testing every feature would still be small. Also, until very recently, consumers were not concerned about security. If it had all of the great features they needed they were happy, regardless of the number of security vulnerabilities that existed in the software. Security should not be an add-on component. To provide a high level of security, it has to be designed into the application from the beginning.
Another major problem found in most programs is error-checking. Poor or
nonexistent error-checking accounts for a large number of security holes
found in today’s programs. Buffer overflows are just one example of this
problem.
Be Updated Be safe
Cheers !!
Hello Readers !!
When software companies starts works for the satisfaction with the product. They might ignore the security of the software and operating system and for the simplicity ...
If someone installs an operating system and
The default installation of windows of an operating system are the services it is running and the ports it has open. The more services and ports, the more points of access; the fewer ports and services, the fewer points of access. Based on this one would hope that a default install of an operating system would have the least number of services running and ports open (if you need more, you can install them on your system). This way, you control the points of compromise in a system.
In reality, the opposite is true. The default install of most operating
Systems has large numbers of services running and ports open. The
reason most manufacturers do this is simple, money. They want a
consumer of their product to be able to install and configure a system with
the least amount of effort and trouble. The reason for this is every time a
consumer has a problem with their product they have to call for support,
& costs the company to generate large amounts of revenue. The fewer calls, the less number of technical support staff, and the lower their costs. Also, the
fewer calls, the less frustration a user experiences, which increases
From a software manufacturers standpoint, this makes sense. From a
Security standpoint, it does not make sense. Why would anyone install a
Non-secure operating system by default? Most of the time this is unintentional, because users are not familiar enough with an operating system to realize how vulnerable it really is. To make matters worse, once the operating system is installed, companies think their job is done and fail to apply patches and updates. This leaves a company with outdated operating systems, which have a large number of vulnerabilities—not a good position to be in from a security perspective.
When software companies starts works for the satisfaction with the product. They might ignore the security of the software and operating system and for the simplicity ...
If someone installs an operating system and
the services they need such as web and authentication are not present,
most of the time they will call for help. This is why companies more software which makes its functionality easier , for just this reason everything installed by default, if someone needs it, it’s there
most of the time they will call for help. This is why companies more software which makes its functionality easier , for just this reason everything installed by default, if someone needs it, it’s there
The default installation of windows of an operating system are the services it is running and the ports it has open. The more services and ports, the more points of access; the fewer ports and services, the fewer points of access. Based on this one would hope that a default install of an operating system would have the least number of services running and ports open (if you need more, you can install them on your system). This way, you control the points of compromise in a system.
In reality, the opposite is true. The default install of most operating
Systems has large numbers of services running and ports open. The
reason most manufacturers do this is simple, money. They want a
consumer of their product to be able to install and configure a system with
the least amount of effort and trouble. The reason for this is every time a
consumer has a problem with their product they have to call for support,
& costs the company to generate large amounts of revenue. The fewer calls, the less number of technical support staff, and the lower their costs. Also, the
fewer calls, the less frustration a user experiences, which increases
From a software manufacturers standpoint, this makes sense. From a
Security standpoint, it does not make sense. Why would anyone install a
Non-secure operating system by default? Most of the time this is unintentional, because users are not familiar enough with an operating system to realize how vulnerable it really is. To make matters worse, once the operating system is installed, companies think their job is done and fail to apply patches and updates. This leaves a company with outdated operating systems, which have a large number of vulnerabilities—not a good position to be in from a security perspective.
Be Updated Be safe
cheers !!
Hello Readers !!
In some systems that should be secure fairly & they are broken into
because they were not configured correctly. In that cases
An administrator is working on a system who is new to that environment . It cases the person in not well suited for that job . This is one of
the reasons why some systems are broken into and others are not.
In order protect your system from the any kind of attack configuring a machine correctly, remove any unwanted services or software. By this way you can easily catch that any misfortune on your system . Misconfiguration is one area that you can control since you are the one configuring the system. Therefore, make sure you spend the time necessary and do it right. Remember, if you think that you do not have time to do it right the first time, attackers might break in and there might not be a second time.
