Site Security

HSH employs secure Web servers running BSD/OS operating systems and Apache server software. (BSD/OS is a commercially-supported UNIX, multiple security level operating system.) The servers support SSL (Secure Socket Layer) protocol, with validation provided by Verisign/Thawte 128 bit encryption certicates for all sensitive transactions.

Additional firewall protection is via fully current Cisco 2501 router software. Constantly configured to comply with each new update, this software defends against IP spoofing, denial-of-service attacks, and other intrusion attempts.

In general, Unix-based systems are not vulnerable to many of the the types of problems which plague Windows- and NT-based systems, including "worms" and other types of viruses.

HSH systems are specifically configured to enable several, multiple security, provisions:

• Only certain limited "public" directories are open. Non-public directories can be accessed only with the proper directory password and, with under certain conditions, only from specific IP addresses. (These same restrictions apply to subdirectories of public directories.)
• Web servers act in a gatekeeper capacity only; database server and other critical files are not reachable from the Internet.
• Servers are in an alarmed, physically secure location.
• HSH employs software programs which monitor network traffic to identify attempts to enter restricted areas, or to upload or change any information.