Buying Options
Apache Security
Print $34.95
Add to Cart
Print+Ebook $38.45
Add to Cart
Ebook $27.99
Add to Cart
Safari Books Online
Add to Cart
What is this?
Print £26.99
Add to Cart
What is this?
Description
This all-purpose guide for locking down Apache arms readers with all the information they need to securely deploy applications. Administrators and programmers alike will benefit from a concise introduction to the theory of securing Apache, plus a wealth of practical advice and real-life examples. Topics covered include installation, server sharing, logging and monitoring, web applications, PHP and SSL/TLS, and more.
Full Description
Table of Contents
  1. Chapter 1 Apache Security Principles

    1. Security Definitions

    2. Web Application Architecture Blueprints

  2. Chapter 2 Installation and Configuration

    1. Installation

    2. Configuration and Hardening

    3. Changing Web Server Identity

    4. Putting Apache in Jail

  3. Chapter 3 PHP

    1. Installation

    2. Configuration

    3. Advanced PHP Hardening

  4. Chapter 4 SSL and TLS

    1. Cryptography

    2. SSL

    3. OpenSSL

    4. Apache and SSL

    5. Setting Up a Certificate Authority

    6. Performance Considerations

  5. Chapter 5 Denial of Service Attacks

    1. Network Attacks

    2. Self-Inflicted Attacks

    3. Traffic Spikes

    4. Attacks on Apache

    5. Local Attacks

    6. Traffic-Shaping Modules

    7. DoS Defense Strategy

  6. Chapter 6 Sharing Servers

    1. Sharing Problems

    2. Distributing Configuration Data

    3. Securing Dynamic Requests

    4. Working with Large Numbers of Users

  7. Chapter 7 Access Control

    1. Overview

    2. Authentication Methods

    3. Access Control in Apache

    4. Single Sign-on

  8. Chapter 8 Logging and Monitoring

    1. Apache Logging Facilities

    2. Log Manipulation

    3. Remote Logging

    4. Logging Strategies

    5. Log Analysis

    6. Monitoring

  9. Chapter 9 Infrastructure

    1. Application Isolation Strategies

    2. Host Security

    3. Network Security

    4. Using a Reverse Proxy

    5. Network Design

  10. Chapter 10 Web Application Security

    1. Session Management Attacks

    2. Attacks on Clients

    3. Application Logic Flaws

    4. Information Disclosure

    5. File Disclosure

    6. Injection Flaws

    7. Buffer Overflows

    8. Evasion Techniques

    9. Web Application Security Resources

  11. Chapter 11 Web Security Assessment

    1. Black-Box Testing

    2. White-Box Testing

    3. Gray-Box Testing

  12. Chapter 12 Web Intrusion Detection

    1. Evolution of Web Intrusion Detection

    2. Using mod_security

  1. Appendix A Tools

    1. Learning Environments

    2. Information-Gathering Tools

    3. Network-Level Tools

    4. Web Security Scanners

    5. Web Application Security Tools

    6. HTTP Programming Libraries

  2. Colophon

View Full Table of Contents
Product Details
Title:
Apache Security
By:
Ivan Ristic
Publisher:
O'Reilly Media
Formats:
  • Print
  • Ebook
  • Safari Books Online
Print Release:
February 2005
Ebook Release:
February 2009
Pages:
432
Print ISBN:
978-0-596-00724-9
| ISBN 10:
0-596-00724-8
Ebook ISBN:
978-0-596-10492-4
| ISBN 10:
0-596-10492-8
Customer Reviews
About the Author
  1. Ivan Ristic

    Ivan Ristic is a web security specialist and the author of of ModSecurity, an open source intrusion detection and prevention engine for web applications. He is the founder of Thinking Stone, which offers products and services related to web application security. Ivan spends his time thinking about web application security, web intrusion detection, and security patterns. Prior to moving to the computer security field, Ivan spent a number of years working as a developer, system architect, and technical director in the software development industry.

    Ivan wrote Apache Security for O'Reilly, a concise yet comprehensive web security guide for administrators, system architects, and programmers. An active participant in the web application security community, Ivan is a member of the Web Application Security Consortium, OASIS, and the PHP Security Consortium.

    View Ivan Ristic's full profile page.

  • Book cover of Apache Security