1) HTTPS
HTTPS is a protocol used to provide security over the Internet.
HTTPS is a way to encrypt information that you send between a browser
and a web server. This protects your website’s users from “man-in-the-middle”
attacks, where someone steals the information being sent to a website, like
credit card information or logins. HTTPS guarantees to users that they're
talking to the server they expect, and that nobody else can intercept or change
the content they're seeing in transit.
2) Keep your computer updated
It may seem obvious, but ensuring you keep all software up to date is
vital in keeping your site secure. Whether your website was built from scratch
by your development team or software you may be running on your website such as
a CMS or forum or you chose to create a DIY site on a third party turnkey
platform. As a website owner it’s your responsibility to ensure that every
piece of software that run in your website are up to date.
If your site uses third party plugins then keep track of their updates
and make sure that these are updated on time as well. Often, many sites include
plugins that fall into disuse over time. Clean out your website of any unused,
old and non-updated plugins — they are sitting ducks for hackers to be used as
a gateway to enter your site and wreak havoc on it.
3) Use security programs
Linux and other operating systems are the exceptions for this topic
But Windows computer must have Security programs. So, let’s discuss about
Windows Security programs for now. Security software has the ability to easily
remove malware and also prevent a malware infection. This is one of the Best
thing about security software.
For ideal and common security configuration use an Antivirus and an
Anti-Malware at the same time. Use of two security programs at the same time is
forbidden. But, that only goes for using two Antivirus or two Anti-Malware
programs at once. Having only one Antivirus and one Anti-Malware is fine
because the two of them detect different kinds of threats and are meant to work
with each other. As for which ones to use, it comes down to personal
preference. Malware Fox and Avast should make a good pair in general though.
4) Validation
Validation should always do both on the browser and server. The browser catch simple failures like
mandatory fields that are empty and when enter text into numbers only
field. You should make sure to check for
these validation and deeper validation on server side as failing to do so could
lead to malicious code or scripting code being inserted into the database or
could cause undesirable results in your website.
5) Strong Passwords
Use of strong passwords is an effective way to limit brute force and
dictionary attacks which are not completely eliminate. Use strong passwords for
website server, admin, database passwords, email and online financial transactions.
Make sure your password is a combination of symbols, upper and lower case
characters, and alphanumeric characters to prevent brute force attacks make it at
least 12 characters long.
To improve security, change your passwords regularly and use different
passwords for your different website logins. Store user's password in encrypted
form. This ensures that even if there is a security breach, attackers do not
get their hands on actual user passwords.
Comments
Post a Comment