• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

securitywing

wing

What are Cookies in Web Browser

What are cookies

Cookies are a small piece of software or codes that is used by websites to track its users. When you go to a website for the first time then it send a small file to its user’s computer, which tracks the user’s behavior while they visit a website.

[Read more…] about What are Cookies in Web Browser

WordPress Security Best Practices

With every update, WordPress improves  its security capabilities and fix the vulnerabilities. As you know that the default configuration is always risky. To  secure a site you always need to customize your security settings, which means apply the best security practices for your blogging platform. If you are a new  WordPress user, you might go through a steep learning curve before you become concern about security. We humans do not try to learn things unless you need it or love it -everybody thinks about user experience. However, nobody trusts a site that get hacked frequently. This post you will illustrate you how to apply the WordPress security settings and practices to make your site secured. You can easily implement  the following instructions  from your cPanel, Plesk or any other control panels.

  • Always create an administrative account for blog management, and another editing account (with posting privilege only) to add post in your blog
  • By default WordPress use the path www.yourwebiste.com/wp-admin.php to login to your blog. Since the  attackers are aware of this you can rename this path by using a plug-in called stealth login. This is an excellent way to prevent automated attack against your blog. Though there are plugins in place to modify the login page, but it is better and more effective if you can change your login page with htaccess. Remember that Modification of htaccess file is not advisable for the beginners. [Read more…] about WordPress Security Best Practices

What is IDS?Basics of Intrusion Detection Systems

The full form of IDS is: Intrusion Detection System. How many of you have heard about burglary? I guess everyone including children. How the burglar is so successful in intruding men’s safe heaven? The answer is when there is no system exists to control the access to your house or office, and then ample of opportunities might arise to misuse or steal your valuable belongings. [Read more…] about What is IDS?Basics of Intrusion Detection Systems

Identity Theft Protection Explained

What is Identity Theft?

You must have heard about ‘impersonation’ or identity fraud-the way one Internet user take on another user’s identity and gain illegal access of another user’s emails or data files. Annually almost 750,000 people are being affected by impersonation-the number one consumer complaint filed with FTC(Federal Trade Commission).

The technical name of identity theft is session hijacking. In fact, over the Internet taking on someone else’s identity is very easy than doing the same on physical world. When you start communicating with another person or visit any website, even when you just send email, each time you need to establish a TCP session connection with your destination computer, where the website resides or emails are stored. Each TCP connection start a TCP session in order to facilitate data transfer ( to learn about TCP read TCP/IP protocol suite or OSI layers) between computers. Session hijacking means taking over such type of TCP session by another person, using your session data.  [Read more…] about Identity Theft Protection Explained

Cisco Router Security Check for Auditor

Since router is the key to access an organization’s  network from the outside world, the maximum security priority should be given to routers that are connected to the Internet and to the important application servers. ISO-27001 has already defined standard router security checklist, which any organization can use to improve  their router securities. This post aims to familiarize you with some critical router security checklist so that you can have an in-depth and clear understanding of router security standards.

[Read more…] about Cisco Router Security Check for Auditor

IIS Security Settings

The version of IIS is all about its modules and functions. If you are just learning IIS then before reading this article, it is better to take  a closer look at the IIS manger on your server and then go through the following  instructions. To secure your IIS server you need to put some extra care to the following settings of IIS server

  1. IIS authentication
  2. IPv4 and domain rules
  3. ISAPI and CGI
  4. Filtering request
  5. Configuration to shared  hosting sites
  6. Authorize the URLs in your server      [Read more…] about IIS Security Settings

Active Directory Security Checklists

As you know that in a Windows based domain system, active directory is the central management tool that provides access controls to users to the servers or to use any services offered by any specific servers. So, security in Windows based infrastructure should start with securing the active directory. Though most of the part of securing an active directory process focus on security settings of the server, but there are some other components in a network environment – DNS, File server etc. – that also play a vital role when we consider about securing an active directory based environment. More or less, you need to know and test the following settings to check up how secure active directory configuration are windows server configurations and  the services.

[Read more…] about Active Directory Security Checklists

Linux Security Basics

The purpose of the Linux security checklist is to help the Linux users, entry-level, to become familiar with the most common security vulnerability of Linux operations systems. As you know security checking needs to be verified against well established practices, the following steps are necessary to following before starting your Linux security checking.

  1. Version number of Linux
  2. How many users use the OS?
  3. How many applications are running in your server?
  4. What are the active services?
  5. If your sever physically secured
  6. Whether modification in Linux configuration needs to go through authorization from senior management
  7. What is your backup plan?
  8. If there is any antivirus software running
  9. Check the access control list of the routers and firewalls, if any, directly connected to your server
  10. Do not use Telnet and FTP since both transmit unencrypted text. Instead use SSH and SFTP for secure connection with other servers or networks.
  11. Power supply unit to your Linux server? Is there any emergency power supply?
  12. Temperature and environmental control of the server room.  [Read more…] about Linux Security Basics

MySQL Security Settings Checklist and Issues

Securing MySQL requires not only hardening the security configuration of your database itself but also the web server along with the operating system. As you know that most of the web hosting provider love Linux and Apache as part of their web-hosting solution, you need to make sure that your host is taking proper security measures to ensure tighter control of Apache and OS. Your main task will be to perform a few simple tasks or test on your MySQL to remove all the known and easy-to-solve security vulnerabilities of your database. And the good news is that if you are new website owner and reluctant to learn some basic SQL tricks to, then also you can fix the basic security settings of your database from PhPMySQLadmin interface of your Cpanel.

Unless you are hosting your website on your own server in your own premise, you should let the task of Apache and OS security setting to your hosting provider. Now, checkout the following  steps required for MySQL security:        [Read more…] about MySQL Security Settings Checklist and Issues

Quality Control Leaders’ Thoughts

Sustainable growth of a company is not any easy task and it is a clear indicative of a company’s objective of continuous quality control. In today’s world we see that there are only a handful number of companies that stand out others with their product. Why only a few company is making billions when some are thinking about closing down a product’s life cycle or even closing their business.? The reason is not straight forward, but one of the major reason of a company’s excelling in performance is its ability to control and improve the quality of the products. This article is not about what  the quality control is all about , it is about what the quality pioneers though about quality control.

Dr. W. Edwards Deming

One of the leading force of the 19th century  behind the development of  quality control management process. he was born in Iowa, USA in October 1900 and received a Bachelor degree in Electrical Engineering and a PhD in the same  subject. His philosophy of quality control are simple and easy-to-follow. Below are some of his philosophy that I’ve explained with my own understanding of quality control.

  • Identify the common and special causes that influence the quality of a product. There are some common causes that is inherent to that system and control the quality  of  a particular product-by ensuring that these common causes are not a threat or at least reducing the probability of occurring such threats during process of producing a product   will certainly improve quality. [Read more…] about Quality Control Leaders’ Thoughts
« Previous Page
Next Page »

Primary Sidebar

Please help us sharing

Categories

  • Artificial Intelligence
  • AWS
  • Basics
  • Containers
  • Cryptocurrency
  • Cyber
  • Cyber Insurance
  • Internet Security and Safety
  • IS Audit
  • IT Security Exams
  • Law & Human Rights
  • Network Security Tips
  • Off Track
  • Social Media Governance
  • Tech Comparisons
  • Tech Stack Suitability
  • Telecom
  • Tutorial

CISSP Sample Test

Take a CISSP Sample Test

CISA Sample Test

CISA IT governance Sample test

Please Follow Us

Contact us for Ads

Go to Contact Form

Search

Footer

Copyrights

Protected by Copyscape Duplicate Content Detection Software

Securitywing.com reserves the copyrights of all of its published articles.No contents of this site is permitted to be published to anywhere else in the Internet.If any contents are found in any other websites, securitywing reserves the rights to file a DMCA complaint. But you have the right to use the link of any relevant article of this site to point from your website if you consider that it might improve the quality of your article.

Tags

antivirus audit AWS backup browser check cisco cloud computer cyber data database ddos email encryption firewall home hsrp ids internet it kubernetes linux load balancing malware network protection putty risk router security security tips server social media ssh SSL tools virus vpn vulnerability web webserver website windows wordpress