For businesses, re-secure server will be attacked. When the server vulnerable to attacks, and security maintenance personnel, the most important thing is to do dealt with promptly, minimizing the impact of the attacks generated by the system. So specifically how to do it?
1, cut off the network
All server attacks from the network, so when the server under attack, we must first cut off the network, on the one hand to quickly cut off the source of the attack, on the other hand also protect other hosts on the network server resides.
2, find the source of the attack
According to their own experience and comprehensive judgment, by analyzing the system log or log in log files to find suspicious information, analyze suspicious programs.
3, analysis of the causes and ways invasion
Be sure to find out the specific reasons and means of attack, there may be a variety of reasons such as system vulnerabilities or bugs, only to find the root of the problem, to be able to promptly repair system.
4, back up user data
When the server is under attack, we must immediately back up user data, but also pay attention to whether the data exists attack. If there is an attack source, it is necessary to completely remove it, and then back up user data to a safe place.
5, reinstall the system
This is the easiest and safest way, the system has suffered in the attack is not possible to completely remove the source of the attack, only to reinstall the system to be able to completely remove the source of the attack.
6, fixes or system vulnerabilities
If, after the system has been found loopholes or vulnerabilities, we must promptly repair system vulnerabilities or modify the program bug.
7, to recover the data and network connection
Will have a good backup copy of data back to reload a good system, then the server to open a network connection, restore external services.
Reproduced in: https: //www.jianshu.com/p/cc04171e9d48