Hide the identity of your server from crackers and hackers - Network World

Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Software

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

Twing targets communities with new search engine. Listen now!

Network World Panorama

Ken Russell on making applets FAST. Listen now!

JavaWorld's Java Technology Insider

Additional Resources

RSS

FEATURED WHITEPAPERS

Endpoint Security: Data Protection for IT, Freedom for Laptop Users Absolute Software

The movement towards laptop computers has fueled an unprecedented number of data breaches. For IT and Information Security, encryption and training has proven ineffective against careless users and insider threats. This paper discusses these limitations and explains how endpoint security allows remote deletion of sensitive data, tracking of computers outside the network and the physical recovery of missing computers. Learn how you can ensure mobile data protection regardless of end-user interference.

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

I wanted to share my experience with a similar wi-fi power saving feature that degraded wireless performance....- Anonymous

Join the Discussion

Partner Content
CA logo

CA Network & Voice Resource Center

Comprehensive Network & Voice Management Visit CA Network & Voice Management Resource Center and get insights into industry best practices, information that helps you to address your challenges.

CA Network & Voice Management Resource Center

whitepaper

Managing Voice Over IP for Successful Convergence

Voice over IP (VoIP) has much to offer in cost savings but some customers have concerns about VoIP call quality compared to the quality of traditional voice services. This white paper will help you learn how to take the right steps so that voice quality is assured.

Managing VoIP for Successful Convergence

whitepaper

The Changing Face of Network Management

Managing your network is serious business. This paper discusses the benefits of integrating configuration change-awareness into your network fault management solution

Download Whitepaper

Hide the identity of your server from crackers and hackers

* ServerMask from Port 80 Software
Web Applications Alert By Mark Gibbs , Network World , 04/09/2003
Gibbs
  • Social Web 
  • Email 
  • Feedback 
  • Close

In trying to keep your systems secure there's one technique that will prevent a lot of problems and is simple and usually cheap. That technique is to not tell people what they don't need to know.

Just think about it: You wouldn't tell people what credit cards you have so why would you reveal how many routers are in your network and what kind of firewalls you use. These are simply not things that need public disclosure.

And most of us extend that idea to our systems. We use network address translation and mail relays to hide our network structure from the outside world. But what about our Web servers?

Go to Netcraft (see links below) and you can find out what types of Web servers are used in a domain or at a specific IP address and even whether they are running subsystems such as Perl and Python! Armed with that knowledge crackers and hackers can select their victims with ease.

So, why make such information visible?

ServerMask from Port80 Software address this problem. It controls what Server header data is visible in HTTP responses and even randomizes the server header between requests to look like one of a number of common servers.

ServerMask allows for customization of session cookies, including the Windows-specific ASP session cookies, and can emulate the Apache Web server's HTTP header order. It can disable Microsoft WebDav to suppress its multiple identifiable headers as well as remove the Windows-specific Public header from HTTP responses. ServerMask can also convert Windows SMTP banners to any message.

Described by the company as a "super fast ISAPI filter," ServerMask requires only 232K byte for the filter and MMC snap-in extension.

And at $49.95 for a single server, ServerMask is not expensive.

Also, check out Port80's IIS Security Checklist - a useful list of security issues to think about.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code