Securing web content and services in open source content management systems

Content management systems (CMS) are information systems designed dominantly for managing different types of publicly available web content although they could be used for various other purposes. Today, CMS open source solutions are one of the most popular platforms for developing web sites, portals, web shops and other publicly available content and services. Main problem in this area is lack of proper understanding of security issues and procedures which are frequently leaving content and services vulnerable for various types of attacks. This work focuses on risk analysis of main CMS open source systems from the point of security of data and services. Usual “points of failure” are analyzed, compared to similar solutions and final measures for full protection are proposed.