Join Kevin Skoglund for an in-depth discussion in this video Server security, part of Foundations of Programming: Web Security.
- View Offline
- Server security can be a deep topic.…And it's always specific to your particular…hardware and software setup.…However, there are a few general principles…that we can follow.…The first is that you should secure…or disable the root user login.…Almost all servers have a root user,…which has the most privileges possible.…We wanna make sure that we secure that…with a strong password,…or if we're not going to be using the root user,…we can disable logging in as the user altogether.…We'll talk more about how that's possible…in just a moment.…You're also gonna want to set up your…access privileges and manage those well,…just like we do with all our other access privileges.…
Remember the principle of least privilege?…You wanna be organized,…review those privileges regularly,…and be able to revoke access immediately…if roles change or people leave the organization.…You should also pay particular attention…to superuser privileges.…A lot of systems like Unix allow you…to have superusers,…which have the ability to do almost everything…
This course is great for developers who want to secure their client's websites, and for anyone else who wants to learn more about web security.
- Why security matters
- What is a hacker?
- How to write a security policy
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- SQL injection
- Session hijacking and fixation
- Passwords and encryption
- Secure credit card payments
Skill Level Beginner
1. Security Overview
2. General Security Principles
3. Filtering Input, Controlling Output
4. The Most Common Attacks
5. Encryption and User Authentication
6. Other Areas of Concern
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.