Software Security
Software Security
Online technology is designed to handle the challenges of securing online data on a regular basis. There are a set of requirements that needs to be followed diligently to maintain it safe. Deogracia is implemented with security requirements (similar to net banking) as Standard Operating Procedure (SOP) and maintains it. These measures are given below:-
Encryption: Encryption is the conversion of electronic data into cipher text,
which cannot be easily understood by anyone except authorized parties. The name Deogracia when
encrypted looks like this: Kl23+kFj1j8ZvTpfaeA/K29xsq3dasflrTDjKB7sUshEnt
Forced Secure Socket Layer (SSL). With SSL, all data entered on system and
uploaded to the server is encrypted. This provides on-the-fly security to user Id and passwords.
Source Code Encryption: The entire software is encrypted using latest licensed
encryption tools with domain and IP restrictions. This means even if someone gains access to the
source code, he can’t use it until he also has access to the Province domain name and IP address
of the server.
Physical protection and Security: Online server comes with add-on physical
security, highly restricted access, disaster protection and backup of data and
application.
Firewall: The firewall restrict access to the server as required by the
Province.
Brute Force Protection: This prevents attempts to break into the system using
guessed Login Ids and password by blocking failed IPs
Root Login alerts: Province admin gets and email alert for all failed as well
as successful login attempts.
Login information: The software maintains log files that contain information
of the Login ID, User IP, Date and duration of software access along with the files the user has
accessed.
Server hardening: The server services that are usually a target of hackers is
permanently locked and starts only when needed.
Random User Id and Strict password: The software enforces random Id to make it
difficult for others to guess it. The password enforcement policy contains alpha-numeric-special
character password combination.