From my last question, I have new idea for database protection. The following ports will be connected via SSL only. Is it possible to hack this database server?
- Http Port for sending & receiving data via WCF Services or Web Services.
- Ftp Port for updating above services.
PS. This question is not include SQL injection problem.
Thanks,
It’s possible to hack just about anything. Your HTTP or (especially) your FTP server could have security bugs in it which open a backdoor. These could be anything from arbitrary code execution under
root/Administratoror full filesystem access.I assume also that your database server is also not bug-free, and could expose all your data.
Obviously, though, having as few ports as possible open is better.