SSF
When you're serious about password protection.


But don't take our word for it, ask our CLIENTS!
IF YOU AREN'T USING SSF PASSWORD COP,
YOUR PASSWORD-PROTECTED SITE IS NOT SECURE!

Why? Because our research indicates that more than 20 percent of pay site traffic is generated by non-members. That's right, over 20 percent of the people connecting to your servers could be there on a free ride--at your expense. After SSF installation that number drops to less than .25 percent (most of which is attributable to hackers constantly trying new passwords). We also know that stolen passwords can travel at lightening speed--to over 400 different IP's in less than 3 hours! Can you afford those kind of losses? No? Then SSF password protection is the solution you can't afford to be without.

WHY SSF?

SSF was initially developed to work on one of the most heavily-trafficked password-protected sites in the world. We needed a solution that would be EASY TO INSTALL and VERY FAST at run time; a solution that would ELIMINATE THE NEED FOR LARGE CONSUMPTION OF SYSTEM RESOURCES (like big arrays of RAM); a solution that would allow FULL MANUAL and AUTOMATIC CONTROL over removal of "Bad-members"; a solution that would USE VERY LITTLE DISK SPACE (log files can grow pretty fast on active sites); and a solution that would be able to HANDLE A HUGE NUMBER OF VISITORS (up to 1,000,000 unique IP's daily on password protected directories).

THE SSF SOLUTION.

SSF is a compressed IP controller for User-Names and Passwords. It uses a hashing technique to store a small amount of data in a RAM cache buffer. (Up to 60 suspected bad-members in the last 10 minutes with less than 1k of shared RAM!) If a member logs-in to your password protected site from different IP's within a very short time interval, something is wrong--and with SSF you'll know all about it.

Not only does SSF track the suspected bad passwords, but also reports the number of different IP's using the password, the average time intervals between accesses, and the User name per each hour of the day. An account that is abnormal (i.e. many different IP's in short intervals over a long period of time) will be removed automatically from your password file and logged in a special log-file.

Two other utilities are also included to give you full manual control to add and remove passwords from your password file if needed. An easy to use web-based interface allows you to view the suspected bad-accounts found on your system and allows you to manually remove any account from your password file.