Is the web server vulnerable?
A vulnerable web server is targeted
If the web server is vulnerable, there is a risk of being damaged by site alteration or information leakage, or being used as a stepping stone for cyber attacks.
Vulnerability measures
The web server administrator should take the following vulnerability countermeasures.
- Defense measures with the latest security updates
- Pay attention to the security information of the system and software used in the Web server such as OS (Linux, Windows, etc.), server software (Apache, etc.), programming language (PHP, etc.), and if vulnerability countermeasures are announced. , Respond promptly. Never use an OS or software that is no longer supported by the manufacturer.
- Vulnerability countermeasures during application development
- Make sure that the developed Web application does not contain any vulnerabilities such as SQL injection and cross-site scripting.
- Thorough password management
- Strictly manage the administrator account of the OS and server software so that it will not be stolen.
- Visualization of web server security status
- Introduce tools to audit content updates and detect file tampering.