WordPress Security Master Plan

Learn keys to WordPress Security - Why Hackers Hack, How Can you Secure Your WP, and Building from scratch if your site gets hacked.
Get more resources here: https://serverguy.com/wcdelhi17/

Transcript

1. WordPress Security Master Plan Arun Bansal CEO
2. Personal Introduction CEO @ ServerGuy.com ( 2009 ) ExStartups- HackingTruths, LeapEd Obsessed with Speed, Security & Scalability WordPress User (Circa 2008) WordPress Fanboy man WordPress Hacker (er, a good one!) WordPress Developer (a bad one) WordPress Hosting Provider (a great one)
3. meh !! Why Care?
4. Coindash.io ICO
5. $7 Million Gone in Just 3 Mins
7. Blacklisting
12. Legal Consequences
14. Size Doesn’t Matter
15. Who are these guys?
16. Automated Bot Script kiddie Motivated Attacker
17. Why Hackers Hack?
23. How to Defend?
24. “ Please Don’t Hack my Site “
25. Password Hygiene admin, 123456 , asd123, password, arunisawesome
26. haveibeenpwned.com
30. Solid Hosting Guy Shared, VPS, Dedicated, Cloud, Managed, UnManaged…….
31. Code Vulnerabilities Wordpress Core + Themes + Plugins + Custom Code
32. OWASP Top 10 2017 (RC1) 1. Injection 2. Broken Authentication and Session Management 3. Cross-Site Scripting (XSS) 4. Broken Access Control 5. Security Misconfiguration 6. Sensitive Data Exposure 7. Insufficient Attack Protection 8. Cross-Site Request Forgery (CSRF) 9. Using Components with Known Vulnerabilities 10.Underprotected APIs
33. WordPress Core 28% of the web is using this open source tool
34. Themes & Plugins Everything Decays
36. Child Themes Best Practice
37. Trusted & Verified Source Nulled
38. Lean /oldsite /newwp
39. wpvulndb.com Tools of Trade
42. Security Plugins WordFence, All In One WP Security, Sucuri Security
43. Finely Tuned Firewall Server Firewall, WAF (Sucuri, CloudFlare, Incapsula..)..
44. SSL Certificates Long live LetsEncrypt.org
45. Backup! Arunisawesome.com/backup.zip Plugins - VaultPress (Jetpack), BackWPup, BackupBuddy
46. Scanning & Monitoring
47. UptimeRobot.com Keyword Check
48. Keyword Check
49. sitecheck.sucuri.net
51. Google Search Console
53. WPScan
57. Sh*t Happens
59. Backups to Rescue Recover Last Good known copy
60. Identify Source Local Machine, Server..……
61. Reset All Passwords
62. Rebuild from Scratch wp-content
63. Harden & Maintain your WP
64. Shared Responsibility
65. Educate your team, your clients
66. • CoinDash Breach • Everyone is a Target • How to Defend • Monitoring • Cleaning Summary
67. Questions ? Stories ? Presentation Download - https://serverguy.com/wcdelhi17 Wordpress Official Guide - https://codex.wordpress.org/Hardening_WordPress Arun Bansal arun@serverguy.com I ♥ emails