|
How
can I find out if my script or application has security
problems? What do I do if my script has been hacked or locked?
Scripts or applications from free
sites on the web are more and more often prone to hacks.
Even commercial tools are not necessarily safe, specially if
the version is outdated. If you have concerns about a
potential script you're considering for your site, or have
been notified that a script or application is not secure,
there are a few good sites to check for more
information. The following three services offer news
about security issues, and the ability to search by file or program name. You can
generally find out whether any problems or bugs have been reported, and if there are available patches or other workarounds:
1. Security Focus - http://www.securityfocus.com/
SecurityFocus.com, owned by Symantec, claims to be the "most comprehensive and trusted source of security information on the Internet", and their
Vulnerability Database is the industry leader for timely news about script and application security issues. Visit their site or search here:
2. MyAvert - http://myavert.avertlabs.com/myavert/
MyAvert is a new effort by security provider McAfee and also provides news, education, and a searchable database of security notices. Visit their site or search here:
3. Microsoft TechNet - http://www.microsoft.com/technet/security/default.mspx
Microsoft's TechNet Security Center "provides links to technical bulletins, advisories, updates, tools, and prescriptive guidance designed to help IT pros keep Microsoft servers, desktops, and applications up-to-date and secure." Visit their site for links and search.
|