Apache Security.pdf

(3952 KB) Pobierz
APACHE
SECURITY
The Complete Guide to Securing
Your Apache Web Server
Ivan Ristić
Last update: Wed Apr 27 09:04:50 BST 2016 (build 199)
Apache Security
Ivan Ristić
Apache Security
by Ivan Ristić
Copyright © 2004, 2005 Ivan Ristić
First published in March 2005. Digital reprint published in April 2010.
Revision 199.
Feisty Duck Limited
www.feistyduck.com
contact@feistyduck.com
Address:
6 Acantha Court
Montpelier Road
London W5 2QP
United Kingdom
Copyeditor:
Mary Dageforde
Technical reviewers:
Rich Bowen and Anton Chuvakin
All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or
by any means, without the prior permission in writing of the publisher.
The author and publisher have taken care in preparation of this book, but make no expressed or implied warranty of any kind and
assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in connection
with or arising out of the use of the information or programs contained herein.
Feisty Duck Digital
Book Distribution
www.feistyduck.com
Licensed for the exclusive use of:
luca lanari <luca_lanari@libero.it>
To my dear wife Jelena,
who makes my life worth living.
Table of Contents
Preface to Digital Reprint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Audience
xiii
Scope
xiv
Contents of This Book
xv
Online Companion
xvii
Conventions Used in This Book
xvii
Programming Conventions
xviii
Typesetting Conventions
xviii
Using Code Examples
xviii
Acknowledgments
xix
1. Apache Security Principles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1.1. Security Definitions
1
1.1.1. Essential Security Principles
2
1.1.2. Common Security Vocabulary
4
1.1.3. Security Process Steps
4
1.1.4. Threat Modeling
5
1.1.5. System-Hardening Matrix
7
1.1.6. Calculating Risk
10
1.2. Web Application Architecture Blueprints
10
1.2.1. User View
11
1.2.2. Network View
12
1.2.3. Apache View
13
2. Installation and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.1. Installation
16
2.1.1. Source or Binary
16
2.1.2. Static Binary or Dynamic Modules
19
2.1.3. Folder Locations
20
2.1.4. Installation Instructions
21
iii

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin