Targeted at readers with Web security concerns, information security experts, systems administrators and all those who want to jump-start their careers in Web security, this series of articles intends to cover the strengthening of Web applications and the Apache Web server framework, as well as any possible attacks against both.
Tag: Securing Apache series
Securing Apache, Part 11: Logs, et al.
In this final part of the series, we will discover how to strengthen security in Apache by logging and other miscellaneous ways.
Configuring a system...
Securing Apache, Part 10: mod_security
Right from Part 1 of this series, we've covered the major types of attacks being done on Web applications -- and their security solutions....
Securing Apache, Part 9: Attacks that Target PHP-based Instances
Beginning with Part 1 of this series, we have covered all major attacks on Web applications and servers, with examples of vulnerable PHP code....
Securing Apache, Part 8: DoS & DDoS Attacks
In this part of the series, we focus on DoS/DDoS attacks, which have been among the major threats to Web servers since the beginning...
Securing Apache, Part 7: Fool-proofing the Server OS
Moving deeper into Web application and Apache security, let's now focus on OS commanding attacks, and those that lead to the disclosure of crucial...
Securing Apache, Part 6: Attacks on Session Management
In this part of the series, we are going to concentrate on attacks on session management. Application-level attacks on the session is about obtaining...
Securing Apache, Part 5: HTTP Message Architecture
In the last four articles in this series, we have discussed SQL injection, XSS, CSRF, XST and XSHM attacks, and security solutions. This article...
Securing Apache, Part 4: Cross-site Tracing (XST) & Cross-site History Manipulation...
This series of articles addresses the Web security concerns of information security experts, systems administrators and all those who want to jump-start their careers...
Securing Apache, Part 3: Cross-Site Request Forgery Attacks (XSRF)
Intended for information security experts, systems administrators, and all those concerned about Web security, this third article in the series moves on from SQL...
Securing Apache, Part 2: XSS Injections
In the previous article in this series, we started our journey to a secured Apache by dissecting its internals. We then looked at various...
