What actions are required to complete below security assignment.
I have received a mail from my manager saying below stuff. I am not sure where to start from, I have some knowledge of security testing but this mails contains entirely new context to me. Mail is as below:
"Post review of our Security Updates and numerous vulnerability scans, one think that jumps out at us is that there are quite a few processes running on our stack that open up listening sockets on default interfaces (0.0.0.0/:: ), which may pose a security risk.
I do see the dashboard process started by dashapp user running a java process that opens up a listening port on (0.0.0.0:9443). We need someone from your team to do a quick security check to ensure its not leaving a hole into our stack. I need help from your team to fill in the following:
a. Does the dashboard process with listening port on (0.0.0.0:9443) pose a security risk
i) If yes provide some details, and suggest corrective action.
ii) If no provide supporting facts as to why not. SSH is a good example. Even though it opens up on default interface (0.0.0.0:22) but it doesn’t pose a security risk because of its secure connection setup procedures that it follows for any new incoming request.
"
Can you guys help me out what all are steps needed to close this task ?
security testing port
asked Nov 12 at 12:55
Dhaval Dosi
104
add a comment |
I have received a mail from my manager saying below stuff. I am not sure where to start from, I have some knowledge of security testing but this mails contains entirely new context to me. Mail is as below:
"Post review of our Security Updates and numerous vulnerability scans, one think that jumps out at us is that there are quite a few processes running on our stack that open up listening sockets on default interfaces (0.0.0.0/:: ), which may pose a security risk.
I do see the dashboard process started by dashapp user running a java process that opens up a listening port on (0.0.0.0:9443). We need someone from your team to do a quick security check to ensure its not leaving a hole into our stack. I need help from your team to fill in the following:
a. Does the dashboard process with listening port on (0.0.0.0:9443) pose a security risk
i) If yes provide some details, and suggest corrective action.
ii) If no provide supporting facts as to why not. SSH is a good example. Even though it opens up on default interface (0.0.0.0:22) but it doesn’t pose a security risk because of its secure connection setup procedures that it follows for any new incoming request.
"
Can you guys help me out what all are steps needed to close this task ?
security testing port
asked Nov 12 at 12:55
Dhaval Dosi
104
I'm afraid this question is off-topic on SO. Even if it was not off-topic, it's also too broad.
– Gabor Lengyel
Nov 12 at 14:30
add a comment |
I have received a mail from my manager saying below stuff. I am not sure where to start from, I have some knowledge of security testing but this mails contains entirely new context to me. Mail is as below:
"Post review of our Security Updates and numerous vulnerability scans, one think that jumps out at us is that there are quite a few processes running on our stack that open up listening sockets on default interfaces (0.0.0.0/:: ), which may pose a security risk.
I do see the dashboard process started by dashapp user running a java process that opens up a listening port on (0.0.0.0:9443). We need someone from your team to do a quick security check to ensure its not leaving a hole into our stack. I need help from your team to fill in the following:
a. Does the dashboard process with listening port on (0.0.0.0:9443) pose a security risk
i) If yes provide some details, and suggest corrective action.
ii) If no provide supporting facts as to why not. SSH is a good example. Even though it opens up on default interface (0.0.0.0:22) but it doesn’t pose a security risk because of its secure connection setup procedures that it follows for any new incoming request.
"
Can you guys help me out what all are steps needed to close this task ?
security testing port
asked Nov 12 at 12:55
Dhaval Dosi
104
I have received a mail from my manager saying below stuff. I am not sure where to start from, I have some knowledge of security testing but this mails contains entirely new context to me. Mail is as below:
"Post review of our Security Updates and numerous vulnerability scans, one think that jumps out at us is that there are quite a few processes running on our stack that open up listening sockets on default interfaces (0.0.0.0/:: ), which may pose a security risk.
I do see the dashboard process started by dashapp user running a java process that opens up a listening port on (0.0.0.0:9443). We need someone from your team to do a quick security check to ensure its not leaving a hole into our stack. I need help from your team to fill in the following:
a. Does the dashboard process with listening port on (0.0.0.0:9443) pose a security risk
i) If yes provide some details, and suggest corrective action.
ii) If no provide supporting facts as to why not. SSH is a good example. Even though it opens up on default interface (0.0.0.0:22) but it doesn’t pose a security risk because of its secure connection setup procedures that it follows for any new incoming request.
"
Can you guys help me out what all are steps needed to close this task ?
security testing port
security testing port
asked Nov 12 at 12:55
Dhaval Dosi
104
asked Nov 12 at 12:55
Dhaval Dosi
104
asked Nov 12 at 12:55
Dhaval Dosi
104
asked Nov 12 at 12:55
Dhaval Dosi
104
asked Nov 12 at 12:55
Dhaval Dosi
104
104
I'm afraid this question is off-topic on SO. Even if it was not off-topic, it's also too broad.
– Gabor Lengyel
Nov 12 at 14:30
add a comment |
I'm afraid this question is off-topic on SO. Even if it was not off-topic, it's also too broad.
– Gabor Lengyel
Nov 12 at 14:30
I'm afraid this question is off-topic on SO. Even if it was not off-topic, it's also too broad.
– Gabor Lengyel
Nov 12 at 14:30
I'm afraid this question is off-topic on SO. Even if it was not off-topic, it's also too broad.
– Gabor Lengyel
Nov 12 at 14:30
add a comment |
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53262642%2fwhat-actions-are-required-to-complete-below-security-assignment%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53262642%2fwhat-actions-are-required-to-complete-below-security-assignment%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I'm afraid this question is off-topic on SO. Even if it was not off-topic, it's also too broad.
– Gabor Lengyel
Nov 12 at 14:30