Wimpy Web Hosts Hope Hackers Won't Scan
(PRWEB) December 17, 2005 -- You may want to see how confident your Web Host is when it comes to survey scanning and vulnerability testing. According to Salvador Periot, Technology Strategist for LogiGuard LLC, there has been “an increase in the number of web host administrators who are terrified of port scans.” LogiGuard offers HackerGuard, a product developed and used for port scanning and testing for SANS top 25 vulnerabilities and other security holes that can be found within a website.
These wimpy web hosts are simply not living in the real world. They are terrified of port scans for a very good reason—these scans do work and they can find weaknesses that otherwise might remain hidden to all. If a weakness is found, they may actually have to beef up their server security which may take a little time and money away from the leisurely lifestyle of the web host. What they really can't accept is that if the 'good guys' aren't scanning your network and probing against vulnerabilities to help you make informed security decisions, you better believe the 'bad guys' are probing and scheming about how to exploit the vulnerabilities that they might find.
Used mainly on the enterprise level, the scanning process used by LogiGuard is quick and painless. However, Mr. Periot states that far too many web hosts come back and complain that they don't want to be scanned, using excuses that the testing process may tie up resources, or worse, complaining that it may “crash” their server. This thought pattern is the same as an automaker that won't crash test a car because it may show weaknesses in the car. Web hosts need to take responsibility for their server security and accept that some security changes may be needed. “Scanning is a way of web life and will only get more intense as resources expand and methods for scanning are improved and refined,” commented LogiGuard's Mr. Periot.
Not all web hosts play dead monkey with real security issues. We were happy to see welcomed responses from Host Color in a recent press release, offering guidelines on securing PHP and Perl applications. The hosting company security specialists also underline how important it is that all web applications are updated regularly. "Our company has always placed a strong emphasis on security. The main problem that we face however is that too many webmasters do not realize that they need to think about all security implications when they install any software on their accounts. A recent example of the type of problem that we face is that many of the 'Contact us' scripts that our customers install are vulnerable and can be used as open-relays by spammers. This causes serious problems for the servers since it can turn them into sources of spam. We have added detailed instructions on how this can be avoided. We have also give simple examples of what Code and SQL injection are and how those intrusions can be stopped as well," says Stoyan Marinov, Host Color's Security Specialist.
LogiGuard's Marketing Director Wendiann Trent adds, “Buck up web hosts! You may not always like the vulnerabilities exposed, but if they're in there, you need to take proactive measures to protect your customers against fraud and theft. Of course, you may find that you may well be hosting a hacker or two, who has been exploiting one of your weaknesses for months! Consider this a godsend and respond accordingly.”
As for poor customer service and a paranoid reaction to the scanning process, one large web hosting company threatened to have their customer removed if he did not discontinue the daily vulnerability scans. This is one of the more extreme examples of web host insecurity that has been displayed over recent months. If a bank officer is afraid of a mock bank robbery while the banking center under his own surveillance, the banking center probably has huge weaknesses which the bank office is either trying to hide, or too lazy to repair or both. Would you feel comfortable depositing your cash, especially anything over $100,000, into a bank with such anti-testing policies?
When searching for a web host, stay away from the web hosts that do not welcome vulnerability testing or have an anti-scan policy. Seek out web hosts who are concerned about server security and have open minds about how to maintain a high level of security for their customers. They do not have to agree with results or conclusions from the scan report, but they should carefully review the results, embrace the increased awareness in learning about the security of their server, and reaffirm to you that they are doing everything they can for you and your customer's on line security.
###
This press release has been reprinted from PRWEB per the terms and conditions of the copyright notice.

Other Article Sites
findabook.com moneycd.info a-mortgage.info
about-lemon-laws.info aboutstudentloans.info
all-about-publishing.info auctions-articles.info bestcollege-university.com bestispconnection.com
biblefolder.com blogger-website.com books-used.info brokers-guide.info buywindows.info cable-dsl.info
career-miner.com carpel-tunnel.info cashinaflash.info cashloanreviews.info casinobell.com chat-house.info
clearmycredit.info collegeloantips.info crones.info depression-articles.info
dirnic.net dishguides.info
divers-below.com expodog.info
financewizz.com fire-insurance.info getgood.info handleit.net
it-idea.info
health-supplies.info hosting-right.com insidealert.com insurance-facts.info jobs-employment.info
justgood.info lookgold.net
lowcost-travel.info money-source.info myhostzone.info numisblog.com
peoplesearchfinder.info pr-articles.info realeas.com
refinancing-guides.info spyware-remove.info
telelot.info the-law.info
toppaid.info travel-deals.info travelcorrect.com wedding-guide-site.com
your-blog.info your-credit.info
|
 |
 |
 |
MORE ARTICLES:
Free Duplicate Content and Expired Domain Names Tools Offered by Internet Marketing Leader Virante
Virante will continue to add a new free tool each week through the remainder of 2006.
Having a Domain Name And Web Site Gives Your Business The Key To The Door
Just like all things in life, the ways to run a business are rapidly changing and evolving. The potential involved with having a domain name/web site is staggering to say the least.
First Australian Web Site to Auction ".au" Domain Names
After the recent auDA (au Domain Administration) decision to allow the sale, purchase and trade of ".au" domain names, the anticipated .au property boom has begun. The need for a well structured, affordable venue, advertising domain names for sale in Australia, has been realised by the creation of the Domain Shed Web site Domainshed (http://www.domainshed.com.au)
Domain Name Promotion And Web Site Design/SEO
If you do not have one million dollars in your pocket, you might find reading what I have to say worth a moment of your time.
Making Your Expired Domain an Enduring Income Creator - Creating the Magic of Expired Domain Gains
Your expired domains could be the treasure house of unlimited and continuous internet wealth that eventually may create amazing expired domain gains An expired domain is also a future and potential weapon capable of setting up an online money making machine
Learning More About Expired Web Domain Expiry And Deletion Patterns
Why is it important to learn more about expired web domain expiry & deletion pattern Read on to find out more
Nexx Cuts Price on .com Domain Names Web Host Offers Exceptional Value on Domain Names
Nexx Online Inc., an innovative North American web host and ICANN Accredited domain name registrar, today cut the price of their .com, .net, .org, .info and .biz domain names to only $7.95 per year.
Domains: Buying an Existing Domain Name Vs a New Domain Name
No one can deny that the Internet is here to stay and that businesses who do not embrace the internet are going to struggle in the coming years. With the Internet and Search Engines reaching a new level of maturity, I have noticed in their rankings that they are beginning to put more and more weight on the age of the domain in their index and because of this we have now reached a crossroad for many businesses to evaluate whether they are better off buying an existing domain versus registering a brand new domain. But Buyer Beware!
Domain Names 101 - A Dummies Guide to Choosing Great Domain Names
When it comes to choosing your domain name, do not allow yourself to get stressed out or worry over choosing the perfect domain name that will make your website a success. When it comes down to it, there are several things you can do to ensure you choose the best type of domain for your business, and after that any number of domain names will work effectively for you.
Internet Domain Registration - Establishing and Transferring Your Domain Name
If you're in business, one of the most important things to you may be your ability to establish an internet presence. Operating some type of functional web site for your business helps your customers find you, can present additional marketing opportunities through e-commerce, and offers advertising opportunities that you can not get elsewhere.
General Pointers And Precautions Of Buying An Expired Web Domain
As every transaction that involves the transfer of an expired web domain is unique and special, it is quite difficult and strenuous to provide a list of advisories and precautions that can help novice expired domain name investors. Here are some common pointers and precautions that provide an air of safety and security while dealing with expired web domain.
Create Domain Names - Finding and Choosing Domain Names that Work
You've seen them.
Available Domain Names - 3 Reasons To Buy An Existing Domain Name
When the time comes to set up your own internet business one of your first thoughts is to buy a domain name to establish a web site for your new business You may spend a lot of time dreaming up possible names and testing their availability but there is another option you should consider -- buying an existing domain name
Using Expired Domain Software To Grab An Excellent Expired Domain Name
In practice, grabbing a good expired domain name is a cumbersome and difficult exercise. Grabbing an excellent expired domain name not only needs an extra effort but also a quick reflex and lightening action to beat the online competition. To make things easier and to quickly find expired domains, you will need to find a way or method that helps grow in the expired domain name business. In this regard, good and efficient expired domain software comes very practical and handy. A piece of expired domain software is also a useful tool that can provide you that extra edge to your business efforts.
3 Steps to Used Expired Domain Names and Deleted Domains
Have ever searched your favorite search engine for "expired domain", "domain names", and / or "deleted domains names"? Well, if you have recently been scouring the internet for good used domain names, then this idea may help. By following a few simple directions you will soon be on your way to domain
|