Modsecurity HandBook - Getting Started.pdf

(1446 KB) Pobierz
MODSECURITY
HANDBOOK
The Complete Guide to the Popular
Open Source Web Application Firewall
Free edition: Getting Started
Ivan Ristić
Last update: Wed Apr 27 09:05:20 BST 2016 (build 654)
Everything you need to know
about ModSecurity, in one place
MODSECURITY
HANDBOOK
The Complete Guide to the Popular
Open Source Web Application Firewall
Ivan Ristiæ
To purchase the full book, go to:
https://www.feistyduck.com
FINE TECHNOLOGY BOOKS
ModSecurity Handbook
Ivan Ristić
ModSecurity Handbook: Getting Started
by Ivan Ristić
Copyright © 2010-2013 Feisty Duck Limited. All rights reserved.
ISBN: 978-1-907117-06-0
Development version (revision 654).
First published in March 2010. Fully revised in April 2012.
Feisty Duck Limited
www.feistyduck.com
contact@feistyduck.com
Address:
6 Acantha Court
Montpelier Road
London W5 2QP
United Kingdom
Production editor:
Jelena Girić-Ristić
Copyeditor:
Nancy Kotary
Cover design:
Peter Jovanović
Cover illustration:
Maja Veselinović
Technical reviewer:
Brian Rectanus
All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or
by any means, without the prior permission in writing of the publisher.
The author and publisher have taken care in preparation of this book, but make no expressed or implied warranty of any kind and
assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in connection
with or arising out of the use of the information or programs contained herein.
ModSecurity is a registered trademark of Trustwave Holdings, Inc. All other trademarks and copyrights are the property of their
respective owners.
Feisty Duck Digital
Book Distribution
www.feistyduck.com
Licensed for the exclusive use of:
luca lanari <luca_lanari@libero.it>
Table of Contents
Preface to the Free Edition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
Scope and Audience
ix
Contents
x
Updates
xiii
Feedback
xiii
About the Author
xiii
About the Technical Reviewer
xiv
Acknowledgments
xiv
I. User Guide
1
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Brief History of ModSecurity
3
What Can ModSecurity Do?
4
Guiding Principles
6
Deployment Options
7
Is Anything Missing?
8
Getting Started
9
Hybrid Nature of ModSecurity
9
Main Areas of Functionality
10
What Rules Look Like
11
Transaction Lifecycle
11
Impact on Web Server
16
What Next?
17
Resources
18
General Resources
19
Developer Resources
20
AuditConsole
20
Summary
21
2. Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
iii

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin