Account Sentry Pro
Automatic Anti-Brute Force Attack Sentry.
Easy to install and maintain.
Key Features
| |
Automated login sentry |
| |
Logs all access attempts |
| |
Automatic blocking of abusing IP addresses |
| |
Stand-alone or integrates with Account Manager Lite/Professional |
| |
Configurable time and attempt blocking |
|
>> Click To See More
Features |
Product Description
What is a "brute force attack?"
A brute force attack, simply put, is an automated attempt to determine a usable username/password combination, to gain access to your private/membership areas. These programs can go through over 1,000,000 combinations in seconds.
A brute force attack program starts by iterating through all of the possible character for a single-character password. Then the program moves on to two-character password combinations. When you consider there are 26 lower case letters, 26 upper case letters, 10 digits and about 32 non-alphanumeric characters, you have about 94 possible guesses for each character in a password. For every additional character added to a password's length the possible character combinations increase exponentially. So for a two character password there are 94 possibilities for the first character and 94 possibilities for the second character. The total number of combinations is 94 X 94 or 94^2 . That's only 8836 possible character combinations and would be easily cracked in less than one second with today's computing power.
Programs like "Brutus" (link not provided for obvious reasons) can be used to guess your username/password combination in seconds.
Account Sentry will stop these attacks and stop them cold by automatically blocking access to IP addresses which guess incorrectly after a pre-configured number of attempts, for a pre-configured amount of time. Having a password management system isn't enough anymore. In today's security environment,you need Account Sentry to truely secure your usernames/passwords.
Product Requirements
| |
Web server account that has CGI
capabilities |
| |
Perl 5 installed on that web server.
Contact your server administrator if you are unsure. |
| |
.htaccess capabilities
These are used to protect your directories. 99% of all UNIX servers
include .htaccess. Not all NT/Windows server software has this capability.
Contact your server administrator if you are unsure. Note: Account
Sentry is NOT compatible with Windows server software, like IIS WebServers or O'Reilly's
WebSite, due to this requirement. Please make sure your NT/Windows WebServer
supports .htaccess (Apache for Windows does support .htaccess). |
| |
mail requirements
Account Sentry requires BLAT mail for use with the NT version and
Sendmail with the UNIX version in order to properly use any of the
program mailing features. Account Sentry also works with your SMTP
mail server. |