Chapter 8. Securing the server

Any time you “plug” something into the internet—a web server, mail server, or your phone for the latest sport scores—you’ve opened up a hole that some malicious person (or bot) can attack. You already know this. Preventing these attacks is a constant battle.

Can you prevent all possible attacks from the internet with 100% certainty? Yes, if you don’t attach anything to the internet. That’s unreasonable, so the goal is to protect your web server (and therefore your customers) as best you can within the budget you have available.

Internet security is a vast and complicated topic, and I can’t cover it all in a single chapter. My goal in this chapter is to show you the types of attacks that may affect you and suggest ...

Get Learn Windows IIS in a Month of Lunches now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.