SUNScholar/Internet Security

This wiki help page assumes that you have used the three system setup procedures to install an Ubuntu server with DSpace software.

Introduction

Originally the internet was not designed to be secure.

It was principally designed to be robust (no single point of failure) and be able to reliably transport data between disparate local networks.

Securing the internet is done on an individual basis, therefore it is the companies/institutions responsibility to secure internet communications.

Open unsecured communications creates the potential for intrusion therefore it is recommended that ALL internet traffic to your repository be encrypted.

In addition it is highly recommended that your repository be properly firewalled. See links below for setup.

Server Security

1. SERVER FIREWALL
2. SECURE CONNECTIONS
3. FURTHER SERVER SECURITY

Client Security

Please encourage your managers, submitters, reviewers, collection managers and metadata editors to use a safe browser such as one of the following:

1. Firefox
2. Google Chrome

References

• https://wiki.duraspace.org/display/DSPACE/SecuringDspace

Firewall

• https://help.ubuntu.com/community/StricterDefaults
• https://help.ubuntu.com/community/UFW

HTTPS connections

• http://www.brandonchecketts.com/archives/convert-and-openssl-apache-ssl-certificate-to-a-pkcs12-tomcat
• http://en.wikipedia.org/wiki/Https
• http://www.biztechmagazine.com/article/2007/07/http-vs-https
• http://help.ubuntu.com/community/OpenSSL
• http://help.ubuntu.com/12.04/serverguide/certificates-and-security.html
• http://help.ubuntu.com/10.04/serverguide/certificates-and-security.html
• http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html

Back to After Installation Tasks