There are basically two ways of getting data from a system, either the front door or the back door.
Protecting the front door is done by maintaining strong password security. Security could be increased by means of only allowing "privileged" accounts access based on IP address. Not a difficult thing to implement. In addition, use of web site audit logs could provide additional tracking. Google Analytics is awesome. A simple javascript tag could be added to the admin headers to track who is going were and could even track by userId. The back door hacking is something that can be difficult to track but a starting place would be to implement intrusion detection software such as tripwire, chkrootkit, or rkhunter. Most backdoor hacks install software (aka root kits) on your server by exploting a security hole. Once the rootkit is installed, the hacker can typically do anything they want with your data. Getting these ID systems to work can become a fulltime job however... Intrusion Detection FAQ http://www.sans.org/resources/idfaq/ Rootkit checkers http://www.brunolinux.com/07-Security/Rootkit_Checkers.html http://www.tripwire.com/ On 2/5/07, Walter Vaughan <[EMAIL PROTECTED]> wrote:
The recently discovered/fixed gap in ecommerce security got me wondering about an article I just read. Sen. Dianne Feinstein is re-introducing a bill that is supported by the United States Direct Marketing Association that would require businesses to notify consumers in the event of a security breach. http://www.dmnews.com/cms/dm-news/legal-privacy/39740.html I'm not adverse to the bills actually, what I am adverse to is "How would I know with an ofBiz installation that I've had a breach?" I don't want the FBI coming after me because I failed to notify the Secret Service because someone downloaded 10,001 names from our system. In the case of the recent ecommerce gap, say on a live system, does anyone have some sort of trip wires that would tell them that someone is scraping data they shouldn't? And more importantly, unusual requests that just look suspicious? -- Walter
