Description
This all-purpose guide for locking down Apache arms readers with all the information they need to securely deploy applications. Administrators and programmers alike will benefit from a concise introduction to the theory of securing Apache, plus a wealth of practical advice and real-life examples. Topics covered include installation, server sharing, logging and monitoring, web applications, PHP and SSL/TLS, and more.
Full Description
Table of Contents
-
Chapter 1 Apache Security Principles
-
Security Definitions
-
Web Application Architecture Blueprints
-
-
Chapter 2 Installation and Configuration
-
Installation
-
Configuration and Hardening
-
Changing Web Server Identity
-
Putting Apache in Jail
-
-
Chapter 3 PHP
-
Installation
-
Configuration
-
Advanced PHP Hardening
-
-
Chapter 4 SSL and TLS
-
Cryptography
-
SSL
-
OpenSSL
-
Apache and SSL
-
Setting Up a Certificate Authority
-
Performance Considerations
-
-
Chapter 5 Denial of Service Attacks
-
Network Attacks
-
Self-Inflicted Attacks
-
Traffic Spikes
-
Attacks on Apache
-
Local Attacks
-
Traffic-Shaping Modules
-
DoS Defense Strategy
-
-
Chapter 6 Sharing Servers
-
Sharing Problems
-
Distributing Configuration Data
-
Securing Dynamic Requests
-
Working with Large Numbers of Users
-
-
Chapter 7 Access Control
-
Overview
-
Authentication Methods
-
Access Control in Apache
-
Single Sign-on
-
-
Chapter 8 Logging and Monitoring
-
Apache Logging Facilities
-
Log Manipulation
-
Remote Logging
-
Logging Strategies
-
Log Analysis
-
Monitoring
-
-
Chapter 9 Infrastructure
-
Application Isolation Strategies
-
Host Security
-
Network Security
-
Using a Reverse Proxy
-
Network Design
-
-
Chapter 10 Web Application Security
-
Session Management Attacks
-
Attacks on Clients
-
Application Logic Flaws
-
Information Disclosure
-
File Disclosure
-
Injection Flaws
-
Buffer Overflows
-
Evasion Techniques
-
Web Application Security Resources
-
-
Chapter 11 Web Security Assessment
-
Black-Box Testing
-
White-Box Testing
-
Gray-Box Testing
-
-
Chapter 12 Web Intrusion Detection
-
Evolution of Web Intrusion Detection
-
Using mod_security
-
-
Appendix A Tools
-
Learning Environments
-
Information-Gathering Tools
-
Network-Level Tools
-
Web Security Scanners
-
Web Application Security Tools
-
HTTP Programming Libraries
-
-
Colophon
Product Details
- Title:
- Apache Security
- By:
- Ivan Ristic
- Publisher:
- O'Reilly Media
- Formats:
-
- Ebook
- Safari Books Online
- Print Release:
- February 2005
- Ebook Release:
- February 2009
- Pages:
- 432
- Print ISBN:
- 978-0-596-00724-9
- | ISBN 10:
- 0-596-00724-8
- Ebook ISBN:
- 978-0-596-10492-4
- | ISBN 10:
- 0-596-10492-8
Customer Reviews
