adventures in drupal security - juniortidal.comin drupal security junior tidal web services &...
TRANSCRIPT
![Page 1: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/1.jpg)
ADVENTURES IN DRUPAL SECURITY JUNIOR TIDAL
WEB SERVICES & MULTIMEDIA LIBRARIAN
NEW YORK CITY COLLEGE OF TECHNOLOGY
@JUNIORTIDAL
1
![Page 2: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/2.jpg)
ORGANIZATIONAL INFORMATICS
2
![Page 3: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/3.jpg)
HUMANS ARE FLAWED
3
![Page 4: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/4.jpg)
HUMANS CREATE SYSTEMS
4
![Page 5: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/5.jpg)
SYSTEMS ARE INHERENTLY FLAWED
5
![Page 6: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/6.jpg)
EVENTUALLY SYSTEMS FAIL
6
![Page 7: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/7.jpg)
THERE IS NO PERFECT SYSTEM
7
![Page 8: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/8.jpg)
THERE IS NO PERFECT SYSTEM
…SO DON’T TRY TO CREATE ONE.
8
![Page 9: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/9.jpg)
SYSTEMS FAIL FROM INTERNAL AND EXTERNAL FACTORS
9
![Page 10: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/10.jpg)
INSTEAD OF BUILDING A PERFECT SYSTEM 10
![Page 11: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/11.jpg)
EMPHASIZE PREVENTIVE MAINTENANCE
11
![Page 12: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/12.jpg)
CREATE RECOVERY STRATEGIES
12
![Page 13: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/13.jpg)
WHAT ARE WE TALKING ABOUT TODAY? BACKGROUND SECURITY COMPROMISED! RECOVERY LEARNING SECURING YOUR SITE
13
![Page 14: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/14.jpg)
BACKGROUND
14
![Page 15: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/15.jpg)
URSULA C. SCHWERIN LIBRARY SUPPORTS OVER 17,000 STUDENTS OF THE NEW YORK CITY COLLEGE OF TECHNOLOGY (CITY TECH)
15
![Page 16: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/16.jpg)
ONE OF THE 23 CAMPUSES OF THE CITY UNIVERSITY OF NEW YORK (CUNY)
16
![Page 17: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/17.jpg)
CONSIDERED A “COMMUTER” SCHOOL
17
![Page 18: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/18.jpg)
SERVES A DIVERSE POPULATION IN DOWNTOWN BROOKLYN
18
![Page 19: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/19.jpg)
THE WEB SERVER
19
![Page 20: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/20.jpg)
MIGRATED FROM A MULTI-DEPARTMENTAL WINDOWS IIS SERVER TO A DEDICATED LAMP SERVER IN 2008.
20
![Page 21: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/21.jpg)
AD HOC SUPPORTED BY COLLEGE IT DEPARTMENT.
21
![Page 22: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/22.jpg)
THE WEB SERVICES LIBRARIAN AND IT ASSOCIATE ARE ADMINS FOR THIS SERVER
22
![Page 23: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/23.jpg)
DRUPAL
23
![Page 24: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/24.jpg)
DRUPAL IS THE CMS USED TO MANAGE SEPARATE DESKTOP AND MOBILE SITES.
24
![Page 25: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/25.jpg)
DRUPAL 6 WAS USED FOR THE DESKTOP SITE.
25
![Page 26: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/26.jpg)
USING ANALYTICS INFORMATION, THERE WAS A NEED TO SUPPORT MOBILE USERS.
26
![Page 27: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/27.jpg)
DRUPAL 7 WAS USED TO CREATE A SEPARATE MOBILE SITE.
27
![Page 28: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/28.jpg)
CONVERSION FROM D6 TO D7 WASN’T POSSIBLE DUE TO LACK OF SUPPORT OF KEY MODULES
28
![Page 29: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/29.jpg)
MOBILE SITE
29
![Page 30: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/30.jpg)
THE MOBILE SITE HAD A WIDGET TO SEARCH THE CATALOG
30
![Page 31: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/31.jpg)
LINKS TO MOBILE FRIENDLY ELECTRONIC RESOURCES
31
![Page 32: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/32.jpg)
LIBRARY INFORMATION SUCH AS HOURS AND CONTACT WAS ALSO PROVIDED
32
![Page 33: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/33.jpg)
SECURITY COMPROMISED!
33
![Page 34: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/34.jpg)
THE MOBILE SITE WAS HACKED ON DECEMBER 21ST, 2014.
34
![Page 35: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/35.jpg)
THE BBC REPORTED A DRUPAL HACK ATTACK ON OCTOBER 31, 2014.
35
![Page 36: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/36.jpg)
UNIVERSITY IT CONTACTED CAMPUS IT ABOUT THE BREACH
36
![Page 37: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/37.jpg)
THE SITE WAS DEFACED AND THE HOMEPAGE REPLACED
37
![Page 38: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/38.jpg)
IT DISCONNECTED THE LIBRARY’S SERVER
38
![Page 39: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/39.jpg)
ATTACK ANALYSIS
39
![Page 40: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/40.jpg)
AFTER EXAMINING LOG FILES, THERE WASN’T ANY EVIDENCE OF UNAUTHORIZED USERS OR FILES
40
![Page 41: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/41.jpg)
SEARCHING MYSQL TABLES FOUND NO MALICIOUS CODE
41
![Page 42: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/42.jpg)
THE BREACH WAS EITHER THE OUTDATED D7 CORE OR MODULE(S)
42
![Page 43: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/43.jpg)
THE MOBILE SITE WAS SHUT DOWN
43
![Page 44: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/44.jpg)
UNTIL THE BETA SITE WAS READY, TRAFFIC WAS REDIRECTED TO THE DESKTOP SITE
44
![Page 45: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/45.jpg)
LESSONS LEARNED
45
![Page 46: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/46.jpg)
DON’T NEGLECT YOUR SITE
46
![Page 47: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/47.jpg)
USE DRUPAL’S EMAIL NOTIFICATIONS FOR NEW UPDATES
47
![Page 48: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/48.jpg)
IMPLEMENT DRUPAL SECURITY MODULES
48
![Page 49: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/49.jpg)
DRUPAL SECURITY MODULES
49
![Page 50: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/50.jpg)
DRUPAL SECURITY KIT
50
![Page 51: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/51.jpg)
CAPTCHA
51
![Page 52: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/52.jpg)
BACK UP AND MIGRATE
52
![Page 53: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/53.jpg)
AUTO LOGOUT
53
![Page 54: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/54.jpg)
LOGIN SECURITY
54
![Page 55: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/55.jpg)
DRUSH
55
![Page 56: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/56.jpg)
STRATEGIES FOR A SECURITY BREACH
56
![Page 57: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/57.jpg)
CREATE RECOVERY GUIDELINES
57
![Page 58: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/58.jpg)
CREATE RECOVERY GUIDELINES
58
![Page 59: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/59.jpg)
TAKE YOUR SITE OFFLINE
59
![Page 60: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/60.jpg)
MAKE A BACKUP OF YOUR HACKED SITE
60
![Page 61: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/61.jpg)
REPLACE A HACKED SITE WITH A BACKUP OR FAILOVER SITE
61
![Page 62: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/62.jpg)
CHECK LOG FILES
62
![Page 63: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/63.jpg)
NOTIFY ALL WHO NEED TO KNOW
63
![Page 64: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/64.jpg)
CHANGE PASSWORDS
64
![Page 65: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/65.jpg)
DOCUMENT EVERYTHING
65
![Page 66: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/66.jpg)
PREVENTIVE STRATEGIES AT THE SERVER LEVEL
66
![Page 67: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/67.jpg)
USE HTTPS (PORT 443)
67
![Page 68: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/68.jpg)
MANAGE FILE EXTENSIONS
68
![Page 69: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/69.jpg)
MANAGE PHP EXECUTION WITHIN YOUR UPLOADS FOLDER
69
![Page 70: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/70.jpg)
ROBOTS.TXT
70
![Page 71: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/71.jpg)
SECURE FILE PERMISSIONS
71
![Page 72: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/72.jpg)
MAKE AND AUTOMATE BACKUPS
72
![Page 73: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/73.jpg)
PREVENTIVE MAINTENANCE
73
![Page 74: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/74.jpg)
STRONG PASSWORDS
74
![Page 75: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/75.jpg)
EVALUATE USER ROLES AND PERMISSIONS
75
![Page 76: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/76.jpg)
EXAMINE SUB DIRECTORIES FOR RANDOM FILES ESPECIALLY /FILES AND /UPLOADS
76
![Page 77: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/77.jpg)
WRAPPING UP SYSTEMS FAIL BACKGROUND OF CITY TECH SECURITY COMPROMISED! RECOVERY LEARNING FROM THE COMPROMISE SECURING YOUR DRUPAL SITE 77
![Page 78: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/78.jpg)
RESOURCES DRUPAL’S SECURITY ADVISORIES
YOUR SITE GOT HACKED. NOW WHAT?
SEC4LIB LISTSERV
78
![Page 79: Adventures in Drupal Security - juniortidal.comin drupal security junior tidal web services & multimedia librarian . new york city college of technology @juniortidal . 1. organizational](https://reader033.vdocuments.site/reader033/viewer/2022060603/6057ad9e565bcf56df449c5a/html5/thumbnails/79.jpg)
THANKS!
79