Preventing Web Attacks with Apache

石头

作者：Ryan C. Barnett
出版日期：January 27, 2006
出版社：Addison Wesley
页数：624
ISBN：ISBN-10: 0-321-32128-6 ISBN-13: 978-0-321-32128-2
文件格式：CHM


“Ryan Barnett has raisedthe bar in terms of running Apache securely. If you run Apache, stopright now and leaf through this book; you need this information.”
Stephen Northcutt, The SANS Institute

The only end-to-end guide to securing Apache Web servers and Web applications

Apache can behacked. As companies have improved perimeter security, hackers haveincreasingly focused on attacking Apache Web servers and Webapplications. Firewalls and SSL won’t protect you: you mustsystematically harden your Web application environment. Preventing Web Attacks with Apachebrings together all the information you’ll need to do that:step-by-step guidance, hands-on examples, and tested configurationfiles.

Building on his groundbreaking SANS presentations onApache security, Ryan C. Barnett reveals why your Web servers representsuch a compelling target, how significant exploits are performed, andhow they can be defended against. Exploits discussed include: bufferoverflows, denial of service, attacks on vulnerable scripts andprograms, credential sniffing and spoofing, client parametermanipulation, brute force attacks, web defacements, and more.

Barnett introduces the Center for Internet SecurityApache Benchmarks, a set of best-practice Apache security configurationactions and settings he helped to create. He addresses issues relatedto IT processes and your underlying OS; Apache downloading,installation, and configuration; application hardening; monitoring, andmore. He also presents a chapter-length case study using actual Webattack logs and data captured “in the wild.”

For every sysadmin, Web professional, and security specialist responsible for Apache or Web application security.

With this book, you will learn to

• Address the OS-related flaws most likely to compromise Web server security
• Perform security-related tasks needed to safely download, configure, and install Apache
• Lock down your Apache httpd.conf file and install essential Apache security modules
• Test security with the CIS Apache Benchmark Scoring Tool
• Use the WASC Web Security Threat Classification to identify and mitigate application threats
• Test Apache mitigation settings against the Buggy Bank Web application
• Analyze an Open Web Proxy Honeypot to gather crucial intelligence about attackers
• Master advanced techniques for detecting and preventing intrusions
  

goddy128

create~~~~~~~~~,Thank you very much

wldtzzming

aaaaaaaaaaaaaaaaaaaaaaa

candice_song

这个是个好东西呀，谢谢

candice_song

正在学习中

candice_song

多谢楼主分享资料