Changes

Secure hosting guide

511 bytes added, 9 years ago
/* Introduction */
Hosting a website that can withstand various malicious attacks and unauthorised access is not an easy task. There are several approaches to mitigating digital threats and reducing your site's vulnerabilities. There is no one-fits-all solution however and the site's owners or administrators should plan for various contingencies well in advance, in lieu of their financial situation and technical expertise. This guide attempts to describe several scenarios and various approaches for secure hosting.
 
==Step 1: Decide on your level of technical expertise==
A lot of choices made within this guide will depend on your level of technical expertise dealing with server configuration and maintenance. You should evaluate your situation honestly and try not to exceed this level. We will use the following key to differentiate the difficulty associated with each type of activity.
 
*'''High Technical''' - multiple experiences of server administration, can confidently install/update server software; apache, mysql, mail server OR access to a consultant with these skills. Do not attempt to learn as you go!
*'''Intermediate Technical''' - some experience of server administration, can install and manage web services software via guides, can use ssh and commandline interface
*'''Basic Technical''' - no experience with server management. Can use software management interfaces such as CPanel
 
*'''Compulsory''' - basic knowledge about Internet infrastructure and addressing is required should you want to maintain anything on the Internet (Facebook, twitter, other social networks exempted) that is bound to last the test of time. Please read through [http://equalit.ie/esecman/appendix_b.html Appendix B - Internet explained] to get the basics and go on from there
==Step1: What are you planning to host?==
*[[Brute_Force_DDOS | Brute force and Denial of Service attacks]]
==Step 4: Decide on your level of technical expertise==
Throughout this guide we will use the following key to differentiate the difficulty level associated with each type of system setup. More technically complicated setups will require either permanent IT staff or access to an IT provider. The latter may be limited by an organisation financial resources.
*'''High Technical''' - multiple experiences of server administration, can confidently install/update server software; apache, mysql mail server
*'''Intermediate Technical''' - some experience of server administration, can install and manage software via guides, can use ssh and commandline interface
*'''Basic Technical''' - no experience, can use software management interfaces such as CPanel
[[Category: Secure Hosting]]
Bureaucrat, emailconfirmed, administrator, translator
662
edits