Segurança de WordPress

•

2 gostaram•2,946 visualizações

O documento discute as principais ameaças à segurança de sites WordPress e fornece dicas para proteger sites. Ele lista riscos como DDoS, botnets, hacking, ataques de força bruta e injeção de SQL, e discute como manter sites seguros através de atualizações frequentes, senhas fortes e únicas, geradores de senhas, backups e outros mecanismos de segurança.

Internet

!
SEGURANÇA DE WORDPRESS
Para iniciantes

!
@julianadflewis
JULIANA LEWIS
Especialista en Conteúdo e Marketing da Sucuri Inc.

!
@julianadflewis
Ataques de Força Bruta
Ameaças

!
@julianadflewis
Injeção de SQL
Ameaças

@julianadflewis
Seja pró-ativo, não reativo
“Somos intuitivos. Bebemos água antes de desidratar. Dormimos
antes de estar muito cansados. Na maioria do tempo, nos
defendemos automaticamente de vírus e infecções, porque nos
focamos conscientemente (e inconscientemente) na manutenção da
saúde do nosso corpo e mente… Passe mais tempo prevenindo
problemas e menos tempo solucionando os problemas.”
David L. Prowse

@julianadflewis
SenhasComplexas, grandes, únicas

@julianadflewis
Um site = Um servidorSuperfície de Ataque

@julianadflewis
Princípio do privilégio mínimo

@artdecotech
Juliana Lewis
@julianadflewis
blog.sucuri.net/portugues
@sucuriseguranca
Obrigada!

Mais conteúdo relacionado

Destaque

Elmer Estrelles Mendoza

Elmer Mendoza

Aplicacion de permisos

diego morales

Climate change and toxic chemiclas

Howard Dryden

Doscampesinos 1 [1]...L G

Adriana Gotsis

CNB

Suzzette Tayri Gutierrez soto

As a Technical Team Lead in Continuous Delivery, I work mainly with support/ maintenance offerings. Taking an existing site over from another team (internal OR external) is often a very daunting task. Thats where Site Audits come into the picture. Some questions which site audits answer are: How much is the code "hacked" - probably the most important question for all developers Have the best practices been followed? Is the server capable of handling the site? Top level listing of technical debts and many more such questions.... In this session, I will talk about the importance of site audits, the timing of site audits and also some tools and techniques which need to be used when auditing a site.

Support/ maintenance travails - Why and how to audit legacy sites

Suchi Garg

Noemi trujillo

Carlos Vidal Gil

HEALTH CERTIFICATE

Philip Taiwo

Pilares de la educacion

UNIVERSIDAD CESAR VALLEJO

CERTIFICATE II Emergency Medical First Response

Alvin Rigby

Según las estadísticas de Naciones Unidas, en los próximos 50 años se va a cuadriplicar el número de personas de edad avanzada, pasando de los 600 millones que hay actualmente a casi 2.000 millones. Hoy en día, una de cada 10 personas tiene 60 años o más. Para 2050 constituirán el 19% de la población mundial. La realidad nos dice que el mundo envejece y ningún gobierno occidental tiene entre sus prioridades afrontar esta situación. (García Araneda, 2007) La educación tiene sus raíces en la misma evolución del ser humano, desde la edad primitiva a la nuestra, ha existido la necesidad de la transferencia del conocimiento, a partir de simples saberes adquiridos para la conservación de su vida, hasta el establecimiento de normas, hábitos y costumbres, llegando a culturas complejas convertidas en sociedades. (Leddy, 2014) De otro lado, la sociedad a través de los años, ha sido receptiva para asumir la educación, de los niños y jóvenes; pero no así de las personas mayores, pues todavía prevalecen prejuicios negativos acerca de la vejez. Es por ello que en las universidades se les brinda los conocimientos a los profesores y estos son los responsables de impartirlos a los estudiantes de educación inicial así como la básica regular, sin embargo existe una gran brecha en lo que respecta a la formación de catedráticos o docentes universitarios. La importancia de la investigación radica en la necesidad de Innovar la Educación Superior, incluyendo en los planes curriculares tanto de Universidades como Institutos superiores las Ciencias de Andragogía y Gerontogogía para lograr la formación de los futuros profesionales que se constituyen en facilitadores en el proceso de transferencia de conocimientos y experiencias, que los participantes puedan aportar.

Gerentogogia educacion de futuro

UNIVERSIDAD CESAR VALLEJO

Typography evaluation

F Ahmed

Six sigma certification

Mukesh Mathew

Ambiente de desenvolvimento para aplicações em WordPress com Vagrant, Compose...

Edison Costa

Paulo freire

UNIVERSIDAD CESAR VALLEJO

Adam Polak - You shall not pass! Prezentacja z meetupu Uszanowanko Programowanko #9 - uszanowanko.pl Każdy programista wcześniej czy później spotyka się z problemem ograniczenia dostępu dla niechcianych osób do pewnych części systemu. Implementacja autoryzacji w zależności od wykorzystanego mechanizmu może być zarówno trywialna, jak i wymagać ogromu pracy. Jak przy pomocy Symfony oraz komponentu security ułatwić sobie pracę podczas implementacji popularnych systemów autoryzacji? Tego dowiesz się podczas tej prezentacji.

You Shall Not Pass - Security in Symfony

The Software House

Microsoft certified Professional Certificate

Arif Wallani

Introduction to case management - Roeland Loggen vs1.1

rloggen

Destaque (18)

Elmer Estrelles Mendoza

Aplicacion de permisos

Climate change and toxic chemiclas

Doscampesinos 1 [1]...L G

CNB

Support/ maintenance travails - Why and how to audit legacy sites

Noemi trujillo

HEALTH CERTIFICATE

Pilares de la educacion

CERTIFICATE II Emergency Medical First Response

Gerentogogia educacion de futuro

Typography evaluation

Six sigma certification

Ambiente de desenvolvimento para aplicações em WordPress com Vagrant, Compose...

Paulo freire

You Shall Not Pass - Security in Symfony

Microsoft certified Professional Certificate

Introduction to case management - Roeland Loggen vs1.1

Mais de Sucuri

In this webinar we will highlight the various activity, access, and error logs WordPress site administrators have at their fingertips. Plus, learn how logs can best be used to manage, troubleshoot, and most importantly, secure your sites. From this webinar you will learn how to: - Highlight suspicious activity before it becomes a security issue. - Identify possible malicious activity in the log files, allowing you to thwart attacks. - Trace back a malicious user’s activity in a post-compromise scenario. - Utilize log file information to better protect, manage, and improve user accountability.

Logs: Understanding Them to Better Manage Your WordPress Site

Sucuri

Like what you see? Hit the like button so we know to make more :) Stay ahead of emerging threats. Sign up to receive technical information about current security issues, vulnerabilities, and exploits. Click to Subscribe: https://bit.ly/2KP2pei Victor Santoyo: In this webinar, we’ll describe action items that can improve the security state of internet-connected devices we all use every day. These devices will include common household staples such as: WiFi Routers, iOS/Android devices, and personal computers. We’ll also cover improvements to items such as 2FA, browser add-ons, and other such considerations. Follow #SucuriSecurity Instagram: https://www.instagram.com/sucurisecur... Twitter: https://twitter.com/sucurisecurity Facebook: https://www.facebook.com/SucuriSecurity/

Webinar: Personal Online Privacy - Sucuri Security

Sucuri

Why Do Hackers Hack?

Sucuri

In this webinar, we will highlight the different types of hacks, how they work, and what to do post-hack. We will also share some examples of hacked websites and discuss the most common methods attackers use to target them, plus how they determine if your site is a worthy candidate and how they operate once access is gained. A few takeaways from this webinar include: - How do you define a hack? - What are the OWASP Top 10? - What is a back door? - XSS, SQL injection, and others

What Are the Most Common Types of Hacks?

Sucuri

During this presentation, we'll discuss the ins and outs of website security. Using good security practices as a website owner helps keep the entire web environment as clean and safe as possible. Expect to learn about: - What website security is and how to approach the subject when making your own plan. - The various access points and attack surfaces of a website. - Simple ways to increase security for all website owners. - Intermediate ways to further secure websites. - General online security practices and preparedness.

Steps to Keep Your Site Clean

Sucuri

Our Website Hacked Trend Report provides insights on the top open-source CMS security, out-of-date software, and specific malware families we see on hacked websites in the Sucuri environment. We’ve built this analysis from prior reports to identify the latest tactics, techniques, and procedures (TTPs) detected by our Remediation Group. A total of 18,302 infected websites and 4,426,795 cleaned files were analyzed in our recent publication. Tony will discuss high-level findings on a range of topics, including: - Affected open-source CMS applications - Outdated CMS and blacklist analysis - Malware families and their effects

2018 Hacked Website Trends

Sucuri

How and why does SEO spam infect a website? This webinar will discuss what attackers gain from spam campaigns and how to deal with it effectively. We will cover different types of SEO spam and why your website can be a target. You will also learn how to protect your website from these attacks. Topics include: - What is SEO spam? - How does SEO spam infect your website, and why? - Should you worry if you have a small website? - How to detect SEO spam. - How to protect your website against SEO spam. More webinars at https://sucuri.net/webinars

Sucuri Webinar: What is SEO Spam and How to Fight It

Sucuri

Sucuri Webinar: How To Know For Sure You Can Trust A Plugin

Sucuri

Sucuri Webinar: Tis the Season for Credit Card Scraping and Malware Trends

Sucuri

Sales Enablement Webinar 3 of 4. We will be covering our Firewall and CDN. A feature benefit guide for our agencies and end users. Why use our firewall? What kind of protection does it offer? How does it affect the efficiency and speed of my site? Will it affect my server's resources? Find out the answers to these questions and more: - 14 POPs around the world. Find out where. - Tips on how to sell different CDN and Firewall features. - Discover how to block different global locations. Yes, you can! ...plus other neat information on obscure settings!

Sucuri Webinar: WAF (Firewall) and CDN Feature Benefit Guide

Sucuri

Sales Enablement Webinar 2 of 4. In this webinar we will be covering the Sucuri API. A lot can be done with our API to make your life easier and more automated. Here are just a few things we will show you can do with our API: - Create your own dashboard - Share data with your customers - Change firewall settings - Clear the cache - Add developers ...plus a sneak peek at things to come in the next version of the API!

Sucuri Webinar: Leveraging Sucuri's API

Sucuri

Sucuri Webinar: Website Security Primer for Digital Marketers

Sucuri

During this webinar, you will meet our Sales Enablement team and preview the marketing information packages we have created for web agencies. - Guide to talking with clients about website security - Email templates to send to clients - Case studies from other web professionals - Checklist for securing client projects This is part one of a four-part series where we show you how to position website security to your customers. Our Sales Enablement team will be in attendance for this webinar providing an extended Q&A section… so bring your questions!

Sucuri Webinar: Sucuri Introduces the Sales Enablement Department

Sucuri

When a website is accessed, the server usually needs to compile the website code, display the end result and provide the visitor with all the website's assets. This all takes a toll on your server resources, slowing down the total page load time and increasing the chances of a small DDoS attack bringing it down. To avoid this overhead, it's necessary to leverage certain types of caching whenever possible. This webinar is for beginners and web professionals to learn about the three most used caching types in practice: Static Files caching, Page Caching, and In-Memory Caching.

Sucuri Webinar: How Caching Options Can Impact Your Website Speed

Sucuri

During this webinar, we'll discuss some basic security concepts for your online store that include what tools you'll need to remain PCI compliant as well as how to keep your data safe. Some key takeaways will include: - Reducing Your Attack Surface - Protecting Cardholder Data - Creating a Disaster Recovery Plan We'll also identify principles and practices that can address multiple PCI requirements at once to help save time and effort.

Sucuri Webinar: Simple Steps To Secure Your Online Store

Sucuri

If you're considering security for your site or are new to our services, this webinar will guide you through Sucuri's simple setup processes. Potential notifications, support options for various scenarios, and ways that you can also work to keep your site malware-free will be discussed. Here’s what you’ll learn: Intro/Quick review of dashboard areas (monitoring, firewall, backups, support) Opening a malware removal request Setup: Firewall, Backups, Monitoring Notices you might receive/support options for each: Firewall blocks, Monitoring alerts, Reporting Tips & tricks (whitelist IP API, bypass prevention, steps to stay clean)

Sucuri Webinar: Getting Started with Sucuri

Sucuri

It's a move we've seen coming since early 2017. Chrome HTTP sites are now officially being marked as 'not secure'. With Chrome dominating 62.85% of the browser market space as of last month means that even small changes can have a big impact on website owners if ignored. To avoid this, we will address the most pertinent questions we are asked: *What steps happened to get to this point? *Why is it still happening? *What is SSL? *How does SSL help secure the internet? *Why is SSL not a standalone solution in making a site secure? *What can you do to ensure your site isn't marked 'not secure' by Chrome?

Sucuri Webinar: Is SSL enough to secure your website?

Sucuri

Cross-site contamination happens when one hacked site infects other sites on a shared server. This webinar is for beginners and web professionals to understand cross-site contamination and how to prevent it. We will be covering: - What is cross contamination? - Why is it a risk? - How to explain it to web service clients. At the end of this webinar, you'll be able to explain cross-site contamination to anyone, regardless of their technical knowledge.

Sucuri Webinar: Preventing Cross-Site Contamination for Beginners

Sucuri

In today's complex security landscape, web applications pose a significant risk to Mid-Market and Enterprise organizations. The question is, how can an organization secure their web properties without sacrificing performance. The answer may be a Cloud-based Web Application Firewall. This webinar will introduce the concept of the CWAF, and the benefits of web application security in the cloud. Samples of topics covered include: - What is a cloud-based web application firewall - The benefits of using a CWAF - How to improve security and performance - How to implement a CWAF in complex web environments This live Q&A-based webinar is designed for development managers, large websites with unique and complex infrastructure/server environments, and anyone who is concerned about securing their web applications. Insights provided in the webinar will help you operate more secure networks, infrastructure, and web applications. You can see the video recording of this webinar at the end of the slides.

Webinar: CWAF for Mid Market/Enterprise Organizations

Sucuri

Webinar ran: Thu, May 31st, 2018 at 11 am PST During this webinar, we explained how many of the PCI compliance standards for safe handling of payment card data are closely aligned with the data retention policies of the new GDPR regulations – from managing personal data, potential breach implications, and properly logging your systems. Also, we shared some best practices and what to expect moving forward as it relates to data security.

Webinar: eCommerce Compliance - PCI meets GDPR

Sucuri

Mais de Sucuri (20)

Logs: Understanding Them to Better Manage Your WordPress Site

Webinar: Personal Online Privacy - Sucuri Security

Why Do Hackers Hack?

What Are the Most Common Types of Hacks?

Steps to Keep Your Site Clean

2018 Hacked Website Trends

Sucuri Webinar: What is SEO Spam and How to Fight It

Sucuri Webinar: How To Know For Sure You Can Trust A Plugin

Sucuri Webinar: Tis the Season for Credit Card Scraping and Malware Trends

Sucuri Webinar: WAF (Firewall) and CDN Feature Benefit Guide

Sucuri Webinar: Leveraging Sucuri's API

Sucuri Webinar: Website Security Primer for Digital Marketers

Sucuri Webinar: Sucuri Introduces the Sales Enablement Department

Sucuri Webinar: How Caching Options Can Impact Your Website Speed

Sucuri Webinar: Simple Steps To Secure Your Online Store

Sucuri Webinar: Getting Started with Sucuri

Sucuri Webinar: Is SSL enough to secure your website?

Sucuri Webinar: Preventing Cross-Site Contamination for Beginners

Webinar: CWAF for Mid Market/Enterprise Organizations

Webinar: eCommerce Compliance - PCI meets GDPR

Segurança de WordPress

1. ! SEGURANÇA DE WORDPRESS Para iniciantes

2. ! @julianadflewis JULIANA LEWIS Especialista en Conteúdo e Marketing da Sucuri Inc.

3. ! @julianadflewis DDOS Ameaças

4. ! @julianadflewis Botnets Ameaças

5. ! @julianadflewis Hacking Ameaças

6. ! @julianadflewis Ataques de Força Bruta Ameaças

7. ! @julianadflewis Injeção de SQL Ameaças

8. ! @julianadflewis Phishing Ameaças

9. @julianadflewis Segurança de Sites

10. @julianadflewis Segurança de e-commerce

11. @julianadflewis Site hackeado

12. @julianadflewis Site hackeado

13. @julianadflewis Listas Negras

14. @julianadflewis Tráfego

15. @julianadflewis Reputação

16. @julianadflewis Receitas

17. @julianadflewis SiteCheck

18. @julianadflewis Por que o meu site?

19. @julianadflewis Seja pró-ativo, não reativo “Somos intuitivos. Bebemos água antes de desidratar. Dormimos antes de estar muito cansados. Na maioria do tempo, nos defendemos automaticamente de vírus e infecções, porque nos focamos conscientemente (e inconscientemente) na manutenção da saúde do nosso corpo e mente… Passe mais tempo prevenindo problemas e menos tempo solucionando os problemas.” David L. Prowse

20. @julianadflewis Responsabilidade

21. @julianadflewis Dicas de Segurança

22. @julianadflewis Atualize

23. @julianadflewis Atualize

24. @julianadflewis Atualize

25. @julianadflewis SenhasComplexas, grandes, únicas

26. @julianadflewis SenhasGerador de Senhas

27. @julianadflewis Um site = Um servidorSuperfície de Ataque

28. @julianadflewis Princípio do privilégio mínimo

29. @julianadflewis Backups

30. @artdecotech Juliana Lewis @julianadflewis blog.sucuri.net/portugues @sucuriseguranca Obrigada!