NOPP Regional Workshop Synthesis Report Security Issues

Security Issues

Several security issues were identified.

Data Security

Several attendees in the Southeast and Gulf Coast workshops expressed the desire to control access to data served by DODS. It was pointed out that being able to restrict access to particular datasets is an important feature.

A few participants in the Southeast workshop discussed the need to be able to display a disclaimer to users of DODS data. This is apparently a requirement of some prospective data providers.

System Security

It is vital for the DODS project to be able to assure data providers that there are no security "leaks" in the DODS software. It was suggested that Perl software isn't as secure as compiled software (C++ was specifically mentioned). It was also suggested that the DODS documentation or web site contain a section describing known httpd security issues.

Data Integrity

Some users expressed concern that data served by DODS could be modified by users. DODS is a read-only protocol, however, so this is not possible.

NOPP Regional Workshop Synthesis Report Security Issues