Securing socket server

  • Thread starter Thread starter Juan
  • Start date Start date
J

Juan

Where can I find information on how to secure a socket server? I'd like to
implement the necessary measures to avoid hackers attacks and to
authenticate the clients...

thanks,
Juan.
 
HI Juan,

Always authenticate the client first, and if possible try to restrict the
IP sources other than that there is nothing much you can do to avoid a
hacker to connect to your server.
You can use a couple of techniques to try to minimize the possible
ocurrence of a break in, for example disconnect the client if an unknow
command is received (I do this) or if you know that no more than a certain
numbers of clients will connect at the same time you can control how manies
connection are live at the same time. Also if the protocol you defined is
text in the ruotine where you get the command check if the receiving string
is sending a command bigger than your limit, if so drop the conneciton.

Hope this help,
 
Yes, and in addition, maintain a blacklist. If a particular client IP
address trys to execute an invalid command or tries to connect multiple
times simultaneously [in an attempt to overwhelm your system], drop the
connection and store that IP address in a Hashtable somewhere so that all
future connection attempts from that IP will be dropped.
 
Thanks, those measures make a lot of sense... I also want to encrypt the
password for transmission... any resources I can use on how to do this?

Juan.


David Sworder said:
Yes, and in addition, maintain a blacklist. If a particular client IP
address trys to execute an invalid command or tries to connect multiple
times simultaneously [in an attempt to overwhelm your system], drop the
connection and store that IP address in a Hashtable somewhere so that all
future connection attempts from that IP will be dropped.

"Ignacio Machin ( .NET/ C# MVP )" <ignacio.machin AT dot.state.fl.us> wrote
in message news:[email protected]...
HI Juan,

Always authenticate the client first, and if possible try to restrict the
IP sources other than that there is nothing much you can do to avoid a
hacker to connect to your server.
You can use a couple of techniques to try to minimize the possible
ocurrence of a break in, for example disconnect the client if an unknow
command is received (I do this) or if you know that no more than a certain
numbers of clients will connect at the same time you can control how manies
connection are live at the same time. Also if the protocol you defined is
text in the ruotine where you get the command check if the receiving string
is sending a command bigger than your limit, if so drop the conneciton.

Hope this help,
Click to expand...
like
to
Click to expand...
Click to expand...
 
Back
Top