Are there any services that pose risks to the Web server security?
By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
Absolutely. As a general principle, you should not run any service on your Web server that is not required for the Web service to function properly. This will vary depending upon the operating system and Web platform you're using, but you should always strive to have the minimal set of services running. The presence of extraneous services offers malicious individuals additional attack vectors to exploit, compromising the security of your system while providing no business benefit to you.
Along these same lines, you should separate critical components of your infrastructure so that each server only hosts one critical service. For example, if you have a dynamic Web application, it is good practice to host the database and Web server on different systems. This provides a degree of isolation and allows you to more easily implement layered protection against attacks.
Learn how to plan and perform a secure installation of your Web server's operating system and services, in Lesson One of SearchSecurity.com's Web Security School.
Dig Deeper on Web Services Security and SOA Security
Related Q&A from Mike Chapple
Are nonprofit organizations, like higher education institutions, subject to FTC cybersecurity regulations and oversight? Expert Mike Chapple explains.continue reading
It's important for healthcare organizations to have a clear social media policy. Expert Mike Chapple explains what needs to be in the policy to stay ...continue reading
SOC 2 evaluations can be helpful tools for organizations assessing their HIPAA compliance, but companies should not solely rely on them. Compliance ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.