Maximum Apache Security

Many of the high-profile attacks on prominent Web sites of the last couple years are a direct result of poor Web site or Web application security.

With more than 65 percent of Web sites using the Apache Web server and the Apache-based open source Web development environment and with the risk of sabotage greater than ever Apache administrators and developers need to know how to build and maintain secure Web servers and Web applications.

Yet most of the currently available Apache books lack detailed information on important Web administration topics like security.Maximum Apache Security details the complex security weaknesses and risks of Apache, and provides hands-on solutions for keeping a Web site secure and buttressed against intruders. It includes up-to-date coverage of both Apache 2.0 as well as Apache 1.3.

Table of Contents

Introduction.
I. GETTING STARTED.

1. How Apache Handles Security.

II. CREATING A SECURE APACHE HOST SERVER.

2. The Risks: Cracking Apache.
3. Establishing Minimum Server Security.
4. Environmental Hazards: Apache and Your Operating System.
5. Apache, Databases, and Security.

III. HACKING APACHE'S CONFIGURATION.

6. Apache Versions and Security.
7. Version 2.0 IPv6 Support.
8. Overlording Apache Server: General Administration.
9. Spotting Crackers: Apache Logging Facilities.

IV. RUNTIME APACHE SECURITY.

10. Apache Network Access Control.
11. Apache and Authentication: Who Goes There?
12. Hacking Secure Code: Apache at Server Side.
13. Hacking Secure Code: Apache at Client Side.

V. ADVANCED APACHE.

14. Apache Under the Hood: Open Source and Security.
15. Apache/SSL.
16. Apache and Firewalls.
17. Apache and Ciphers.
18. Hacking Homegrown Apache Modules.

VI. APPENDIXES.

Appendix A. Apache Security-Related Modules and Directives.
Appendix B. Apache Security Advisories and Bugs.
Appendix C. Apache Security Resources.
Appendix D. Apache API Quick Reference.
Appendix E. Glossary.
Index.

過去幾年來，許多知名網站遭受的高調攻擊都是由於網站或網頁應用程式安全性不佳所導致的。由於超過65％的網站使用Apache Web伺服器和基於Apache的開源網頁開發環境，而且破壞風險比以往更大，Apache管理員和開發人員需要知道如何建立和維護安全的網頁伺服器和網頁應用程式。然而，目前大部分的Apache書籍都缺乏有關重要的網頁管理主題，如安全性的詳細資訊。《Maximum Apache Security》詳細介紹了Apache的複雜安全弱點和風險，並提供實用解決方案，以確保網站安全並防範入侵者。該書包括對Apache 2.0和Apache 1.3的最新覆蓋。目錄如下：

導論
第一部分：入門
1. Apache的安全處理方式
第二部分：建立安全的Apache主機伺服器
2. 風險：破解Apache
3. 建立最低伺服器安全性
4. 環境風險：Apache和您的作業系統
5. Apache、資料庫和安全性
第三部分：破解Apache的設定
6. Apache版本和安全性
7. 版本2.0的IPv6支援
8. 監控Apache伺服器：一般管理
9. 偵測駭客：Apache日誌設施
第四部分：執行時Apache安全性
10. Apache網路存取控制
11. Apache和驗證：誰在那裡？
12. 破解安全程式碼：伺服器端的Apache
13. 破解安全程式碼：客戶端的Apache
第五部分：進階Apache
14. Apache的內部運作：開源和安全性
15. Apache/SSL
16. Apache和防火牆
17. Apache和密碼
18. 破解自製的Apache模組
附錄
附錄A. 與安全相關的Apache模組和指令
附錄B. Apache安全性公告和錯誤
附錄C. Apache安全性資源
附錄D. Apache API快速參考
附錄E. 詞彙表
索引