Preventing Web Attacks with Apache

by Ryan C. Barnett

The only end-to-end guide to securing Apache Web servers and Web applications Apache "can" be hacked. As companies have improved perimeter security, hackers have increasingly focused on attacking Apache Web servers and Web applications. Firewalls and SSL won't protect you: you must systematically harden your Web application environment. "Preventing Web Attacks with Apache" brings together all the information you'll need to do that: step-by-step guidance, hands-on examples, and tested configuration files. Building on his groundbreaking SANS presentations on Apache security, Ryan C. Barnett reveals why your Web servers represent such a compelling target, how significant exploits are performed, and how they can be defended against. Exploits discussed include: buffer overflows, denial of service, attacks on vulnerable scripts and programs, credential sniffing and spoofing, client parameter manipulation, brute force attacks, web defacements, and more. Barnett introduces the Center for Internet Security Apache Benchmarks, a set of best-practice Apache security configuration actions and settings he helped to create. He addresses issues related to IT processes and your underlying OS; Apache downloading, installation, and configuration; application hardening; monitoring, and more. He also presents a chapter-length case study using actual Web attack logs and data captured "in the wild." "For every sysadmin, Web professional, and security specialist responsible for Apache or Web application security."

Kindle Edition

First published January 1, 2006

Reviews

[Derek Bridge · Rating 4 out of 5]

This is the best of the Apache books, written by someone who seems to have real experience and a willingness to share that experience. It's a shame that the more general books don't have the same practical angle.

[Tracy · Rating 5 out of 5]

nice and meaty.