preview

A Brief Note On D2 And Computer Misuse Act

Good Essays

D3 – How to Improve Web Security.
Websites are exposed to the outside world and everything possible should be done to ensure that they remain safe and enjoyable environments for the people who use them. Legally it is the responsibility of the owners of the website to ensure that any information stored about customers is protected and that the site is not used as a base for installing malicious software upon user’s computers or launch Denial of Service Attacks against other people’s sites. To learn more about the legal responsibilities you should read the Data Protection Act 1998 and the Computer Misuse Act 1990. Apart from the legal aspects of security there are also business aspects to it. An unsafe website will not attract and keep customers.
Server-Side security.
Servers should be protected by strong firewalls and access to ports beyond standard HTTP and HTTPS disabled. Do not expose your server’s entry points more than you have to. Within the server you should employ an intrusion detection system like Tripwire to catch attempts at hacking whilst they are occurring.
Access to the contents of the webserver that is hosting your site should be protected with strong authentication. It does not matter how strong the rest of your security measures are if your webserver contains weak passwords and default accounts. The passwords chosen should be as long as possible and contain special characters, such as the dollar sign, to make it difficult for hackers to use brute force

Get Access