Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Moodle Security
  • Table Of Contents Toc
Moodle Security

Moodle Security

By : Darko Miletic
4.3 (6)
Buy this Book
close
close
Moodle Security

Moodle Security

4.3 (6)
By: Darko Miletic
Buy this Book

Overview of this book

Moodle Security is packed with practical examples, which guide you through optimizing the protection of your Moodle site. Each chapter covers a different security threat and how to secure your site against it. You will also find recommendations for what is best for your particular system and usage. If you are in charge of Moodle – whether you are an administrator or lead teacher – then securing it is one of the most important things that you can do. You need to know the basics of working with Moodle, but no previous experience of system administration is required.
Table of Contents (17 chapters)
close
close
close
Moodle Security
Icon
Moodle Security
Credits
Icon
Credits
About the Author
Icon
About the Author
About the Reviewers
Icon
About the Reviewers
www.PacktPub.com
Icon
www.PacktPub.com
Preface
Icon
Preface
Lock Free Chapter
1
Delving into the World of Security
Icon
Delving into the World of Security
Icon
Moodle and security
Icon
The secure installation of Moodle
Icon
Quickly securing Moodle
Icon
Summary
2
Securing Your Server Linux
Icon
Securing Your Server Linux
Icon
Securing your Linux—the basics
Icon
Apache configuration
Icon
MySQL configuration
Icon
PHP configuration
Icon
File security permissions
Icon
Adequate location for a Moodle installation
Icon
How to secure Moodle files
Icon
Summary
3
Securing Your Server—Windows
Icon
Securing Your Server—Windows
Icon
Securing Windows—the basics
Icon
File security permissions
Icon
Installing and securing PHP under Internet Information Server
Icon
Securing MySQL
Icon
Summary
4
Authentication
chevron up
Icon
Authentication
Icon
Basics of authentication
Icon
Common authentication attacks
Icon
Authentication types in Moodle
Icon
Summary
5
Roles and Permissions
Icon
Roles and Permissions
Icon
Roles and capabilities
Icon
Standard Moodle roles
Icon
Customizing roles
Icon
Best practices
Icon
Summary
6
Protection Against Bots
Icon
Protection Against Bots
Icon
Internet bots
Icon
Protecting Moodle from unwanted search bots
Icon
Protection against spam bots
Icon
Protection against brute force attacks
Icon
Summary
7
Securing User Files
Icon
Securing User Files
Icon
Uploading files into Moodle
Icon
Dangers and pitfalls
Icon
Anti-virus and Moodle
Icon
Summary
8
Securing Moodle Data
Icon
Securing Moodle Data
Icon
User information protection
Icon
Course information protection
Icon
Summary
9
Monitoring User Activity
Icon
Monitoring User Activity
Icon
Activity monitoring using Moodle tools
Icon
Activity monitoring using OS native tools
Icon
Summary
10
Backup
Icon
Backup
Icon
Importance of backup
Icon
Backup tools in Moodle
Icon
Site backup
Icon
Disaster recovery scenario
Icon
Summary
1
Authentication Plugins
Icon
Authentication Plugins
Icon
Plugins less common in production servers
Icon
Summary

Common authentication attacks

Any type of security attack is directed toward potential weak spots in the system that is under attack. The most common weaknesses related to the authentication and ways of protecting from them are as follows:

Weak passwords

A password that is easily guessed and does not provide an effective defense against unauthorized access to a resource is considered weak. Such passwords are usually:

  • Short

  • Set to dictionary word or name

  • Set to be the same as username

  • Set to some predefined value

When we have a platform with weak passwords it can be attacked using brute force login technique (also known as dictionary attack).

Dictionary attack is a technique for defeating authentication mechanism by trying to determine its pass-phrase by searching likely possibilities. In practice this means that a bot (automated script) constantly tries to log on by sending various usernames and passwords from a predefined list of words (usually a dictionary list of words—hence the name dictionary...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Moodle Security
End of Section 4
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon