Online public network security case nanny level tutorial [reaching out for Party welfare]

This tutorial involves the content of online public network security files , With 2022 Years and beyond .

---

Prerequisite

The domain name subject shall be consistent with the filing subject as far as possible

The subject of domain name registration shall be the same as the subject of filing , Units are units , A person is a person

material ： Positive aspect of ID card 、 The recorder holds the ID card photo 、 Domain name certificate 、（ICP Record number - Optional ）

Try to finish ICP Keep on record , And then do the public network security record , The audit speed will be faster .

---

Negative type

1、 domain name 、icp Use registered or filed on behalf of （ Did you ask for personal materials when filing ）

For the record, the individual must be yourself on the domain name certificate ,icp The filing individual should also be yourself （ File Personal , The enterprise does not approve ）
The same as for the record enterprise , The enterprise name should be consistent .

2、 Safety is not good

If the website has not done any security measures , It is not recommended to directly prepare the public network security record ,
The main points of self-examination are ：

1. Whether the background address is the default address （ classic ）
2. Whether the website port or test port is still open
3. Weak password 、admin Whether the user still exists 【 classic 】
4. Whether non essential ports use firewalls （ Or other software ） Prevent 【 A firewall 、 The safety dog must be opened , Wise remark of an experienced person 】
5. Debugging interface 、 Whether the technical documents are closed or encrypted , Whether the default password （swagger etc. ）【 Very classic 】
6. For mobile applications ,url Whether root address access should be disabled 【 In especial app Class application , It should be forbidden 】
7. ip Whether the direct connection can access ？【 It must be forbidden ip Direct connection 】

The server is ddos、 Missed scan attack 、 Foreign missed scanning website scanning （ At present, they mainly come from the United States and Australia , A few requests come from Britain and France ）、 Sniffing （ Most of them come from Fujian 、 Beijing , A few are from Hong Kong ） Although there is nothing on it , Will still be attacked every day .
（ Because there will be great gods and novices in any industry , If your server doesn't want to be the target of a rookie , Let's check ourselves first ！）

---

Online public network security

1. Login home

https://www.beian.gov.cn/

2. Click online filing to log in

3. register

4. Fill in registration information

5. Go back to the home page and log in

6. The page will automatically jump to the personal Center , Fill in personal data and save

7. Credit certification fill in your mobile phone number and email account number here

（ The above picture is from the official tutorial ：《 National public security organ Internet website security service platform filing operation guide 》）
The picture below is 2022 Version of ：

8. Click the home page to enter the filing procedure

9. Click start-up main body management

10. Choose an individual , Fill in the main content

11. Click on “ New website application ”》 next step

12. Fill in the basic information of the website

Note here ： The record number of the Ministry of industry and information technology may not be

Note here ： There is a serious jam here , Caton may cause no response or search failure after selection , Just try a few more times .
Click the search service provider directly
Access service provider ：（ Consult the server supplier for details ） such as xx China Unicom
Registered service providers ： A service provider that provides domain names , such as ： New network

Next, fill in the following figure （ Except in special cases ）

13. Fill in the basic information of the website

Check all the information of the same principal that will do

After that is waiting for ~~~

The actual audit time of the personal test is about half a day （ I picked it up this morning , I went to work in the afternoon ）

Pay attention to the point ：

1. The Internet speed of the Ministry of network security website is easy to get stuck , User information refresh errors often occur . When an error occurs, you can refresh the information or refresh the page , Never go to the next step against mistakes .