Website Security
The Big Picture with Simple Steps to Take

WordCamp Europe, 2016
Slides: https://adcwp.me/wceu2016

Aaron D. Campbell – https://aarondcampbell.com/
aaron@ithemes.com – @AaronCampbell
http://profiles.wordpress.org/aaroncampbell/
Security is Scary
Or is it?
Types of Attacks
- Brute Force
- SQL Injection (SQLi)
- Cross Site Scripting (XSS)
- Cross-site Request Forgery (CSRF)
- Inclusion Vulnerabilities (LFI and RFI)
- Directory Traversal
- Far FAR too many to list
Drastically Improve Security
With a Little Effort
and
Some Smart Decisions
Choose a Quality Host
Choose Quality Software
Plugins & Themes, as well as on your computer
Use a Password Manager
Makes it easier to have long, random, unique passwords everywhere.
Two Factor Auth
Add to WordPress using iThemes Security Pro or Two Factor
Use with Authy, Google Authenticator, or LastPass Authenticator
It’s not if you get attacked, but rather how you prevent it from being successful.
Make it Hard on Them
- Choose a Good Host
- Choose Good Software
- Use a Password Manager
- Use Two Factor Authentication
See? Easy!
Q & A
Aaron D. Campbell – https://aarondcampbell.com/
aaron@ithemes.com – @AaronCampbell
http://profiles.wordpress.org/aaroncampbell/
Slides: https://adcwp.me/wceu2016
This presentation is running on WordPress using the Presenter plugin