Preventing Web Attacks with Apache

By Ryan C. Barnett

"Ryan Barnett has raised the bar in terms of running Apache securely. If you run Apache, stop right now and leaf through this book; you need this information." -- Stephen Northcutt, The SANS Institute The only end-to-end guide to securing Apache Web servers and Web applications Apache can be hacked. As companies have improved perimeter security, hackers have increasingly focused on attacking Apache Web servers and Web applications. Firewalls and SSL won't protect you: you must systematically harden your Web application environment. Preventing Web Attacks with Apache brings together all the information you'll need to do that: step-by-step guidance, hands-on examples, and tested configuration files. Building on his groundbreaking SANS presentations on Apache security, Ryan C. Barnett reveals why your Web servers represent such a compelling target, how significant exploits are performed, and how they can be defended against. Exploits discussed include: buffer overflows, denial of service, attacks on vulnerable scripts and programs, credential sniffing and spoofing, client parameter manipulation, brute force attacks, web defacements, and more. Barnett introduces the Center for Internet Security Apache Benchmarks, a set of best-practice Apache security configuration actions and settings he helped to create. He addresses issues related to IT processes and your underlying OS; Apache downloading, installation, and configuration; application hardening; monitoring, and more. He also presents a chapter-length case study using actual Web attack logs and data captured "in the wild." For every sysadmin, Web professional, and security specialist responsible for Apache or Web application security. With this book, you will learn to * Address the OS-related flaws most likely to compromise Web server security * Perform security-related tasks needed to safely download, configure, and install Apache * Lock down your Apache httpd.conf file and install This description may be from another edition of this product.

• Format: Paperback
• Language: English
• ISBN: 0321321286
• ISBN13: 9780321321282
• Release Date: January 2006
• Publisher: Addison-Wesley Professional
• Length: 582 Pages
• Weight: 0.05 lbs.
• Dimensions: 1.2" x 7.0" x 9.2"

Customer Reviews

super

Thanks a lot, we are very happy to have this book in our library!

A strong mix of Apache security and Web application assessment

I recently received copies of Apache Security (AS) by Ivan Ristic and Preventing Web Attacks with Apache (PWAWA) by Ryan Barnett. I read AS first, then PWAWA. Both are excellent books, but I expect potential readers want to know which is best for them. The following is a radical simplification, and I could honestly recommend readers buy either (or both) books. If you are more concerned with a methodical, comprehensive...

Thorough security work on Apache

This book is a well written, in depth, look into the security issues around Apache and applications developed on top of Apache. The content is relevant, well explained, and very useful to both applications engineers and network security folks. Definitely a must read for those looking to deploy high load applications on the open Internet.

bolt down your Apache!

Apache is the most common web server out there. It has been heavily built up in functionality by volunteer programmers. Naturally, there are numerous books detailing all that you can do with it. Very versatile. Unfortunately, that is one of the problems! As many commercial websites use Apache, there is a huge incentive for crackers to subvert it in various fashions. Perhaps to get at the back end SQL database. In which might...