ModSecurity 2.5: securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide
Saved in:
| Main Author: | |
|---|---|
| Format: | Electronic eBook |
| Language: | English |
| Published: |
Birmingham, U.K.
Packt Pub.
2009
|
| Series: | From technologies to solutions
|
| Subjects: | |
| Physical Description: | 1 online resource (ix, 261 pages) illustrations |
| ISBN: | 9781847194756 1847194753 1847194745 9781847194749 |
Staff View
MARC
| LEADER | 00000nmm a2200000zc 4500 | ||
|---|---|---|---|
| 001 | BV045348872 | ||
| 003 | DE-604 | ||
| 005 | 00000000000000.0 | ||
| 007 | cr|uuu---uuuuu | ||
| 008 | 181210s2009 |||| o||u| ||||||eng d | ||
| 020 | |a 9781847194756 |9 978-1-84719-475-6 | ||
| 020 | |a 1847194753 |9 1-84719-475-3 | ||
| 020 | |a 1847194745 |9 1-84719-474-5 | ||
| 020 | |a 9781847194749 |9 978-1-84719-474-9 | ||
| 035 | |a (ZDB-4-ITC)ocn635504316 | ||
| 035 | |a (OCoLC)635504316 | ||
| 035 | |a (DE-599)BVBBV045348872 | ||
| 040 | |a DE-604 |b ger |e rda | ||
| 041 | 0 | |a eng | |
| 082 | 0 | |a 005.8 |2 22 | |
| 100 | 1 | |a Mischel, Magnus |e Verfasser |4 aut | |
| 245 | 1 | 0 | |a ModSecurity 2.5 |b securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide |c Magnus Mischel |
| 264 | 1 | |a Birmingham, U.K. |b Packt Pub. |c 2009 | |
| 300 | |a 1 online resource (ix, 261 pages) |b illustrations | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b c |2 rdamedia | ||
| 338 | |b cr |2 rdacarrier | ||
| 490 | 0 | |a From technologies to solutions | |
| 505 | 8 | |a With more than 67% of web servers running Apache and web-based attacks becoming more and more prevalent, web security has become a critical area for web site managers. Most existing tools work on the TCP/IP level, failing to use the specifics of the HTTP protocol in their operation. Mod_security is a module running on Apache, which will help you overcome the security threats prevalent in the online world. A complete guide to using ModSecurity, this book will show you how to secure your web application and server, and does so by using real-world examples of attacks currently in use. It will help you learn about SQL injection, cross-site scripting attacks, cross-site request forgeries, null byte attacks, and many more so that you know how attackers operate. Using clear, step-by-step instructions this book starts by teaching you how to install and set up ModSecurity, before diving into the rule language with examples. | |
| 505 | 8 | |a It assumes no prior knowledge of ModSecurity, so as long as you are familiar with basic Linux administration, you can start to learn right away. Real-life case studies are used to illustrate the dangers on the Web today _ you will for example learn how the recent worm that hit Twitter works, and how you could have used ModSecurity to stop it in its tracks. The mechanisms behind these and other attacks are described in detail, and you will learn everything you need to know to make sure your server and web application remain unscathed on the increasingly dangerous web. Have you ever wondered how attackers figure out the exact web server version running on a system? They use a technique called HTTP fingerprinting, and you will learn about this in depth and how to defend against it by flying your web server under a "false flag". | |
| 505 | 8 | |a The last part of the book shows you how to really lock down a web application by implementing a positive security model that only allows through requests that conform to a specific, pre-approved model, and denying anything that is even the slightest bit out of line | |
| 650 | 7 | |a COMPUTERS / Internet / Security |2 bisacsh | |
| 650 | 7 | |a COMPUTERS / Networking / Security |2 bisacsh | |
| 650 | 7 | |a COMPUTERS / Security / General |2 bisacsh | |
| 650 | 7 | |a Firewalls (Computer security) |2 blmlsh | |
| 650 | 7 | |a Computer security / Software |2 blmlsh | |
| 650 | 7 | |a Computer security |2 fast | |
| 650 | 7 | |a Firewalls (Computer security) |2 fast | |
| 650 | 4 | |a Firewalls (Computer security) |a Computer security |v Software | |
| 912 | |a ZDB-4-ITC | ||
| 999 | |a oai:aleph.bib-bvb.de:BVB01-030735525 | ||
Record in the Search Index
| _version_ | 1804179172288888832 |
|---|---|
| any_adam_object | |
| author | Mischel, Magnus |
| author_facet | Mischel, Magnus |
| author_role | aut |
| author_sort | Mischel, Magnus |
| author_variant | m m mm |
| building | Verbundindex |
| bvnumber | BV045348872 |
| collection | ZDB-4-ITC |
| contents | With more than 67% of web servers running Apache and web-based attacks becoming more and more prevalent, web security has become a critical area for web site managers. Most existing tools work on the TCP/IP level, failing to use the specifics of the HTTP protocol in their operation. Mod_security is a module running on Apache, which will help you overcome the security threats prevalent in the online world. A complete guide to using ModSecurity, this book will show you how to secure your web application and server, and does so by using real-world examples of attacks currently in use. It will help you learn about SQL injection, cross-site scripting attacks, cross-site request forgeries, null byte attacks, and many more so that you know how attackers operate. Using clear, step-by-step instructions this book starts by teaching you how to install and set up ModSecurity, before diving into the rule language with examples. It assumes no prior knowledge of ModSecurity, so as long as you are familiar with basic Linux administration, you can start to learn right away. Real-life case studies are used to illustrate the dangers on the Web today _ you will for example learn how the recent worm that hit Twitter works, and how you could have used ModSecurity to stop it in its tracks. The mechanisms behind these and other attacks are described in detail, and you will learn everything you need to know to make sure your server and web application remain unscathed on the increasingly dangerous web. Have you ever wondered how attackers figure out the exact web server version running on a system? They use a technique called HTTP fingerprinting, and you will learn about this in depth and how to defend against it by flying your web server under a "false flag". The last part of the book shows you how to really lock down a web application by implementing a positive security model that only allows through requests that conform to a specific, pre-approved model, and denying anything that is even the slightest bit out of line |
| ctrlnum | (ZDB-4-ITC)ocn635504316 (OCoLC)635504316 (DE-599)BVBBV045348872 |
| dewey-full | 005.8 |
| dewey-hundreds | 000 - Computer science, information, general works |
| dewey-ones | 005 - Computer programming, programs, data, security |
| dewey-raw | 005.8 |
| dewey-search | 005.8 |
| dewey-sort | 15.8 |
| dewey-tens | 000 - Computer science, information, general works |
| discipline | Informatik |
| format | Electronic eBook |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>03626nmm a2200457zc 4500</leader><controlfield tag="001">BV045348872</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">00000000000000.0</controlfield><controlfield tag="007">cr|uuu---uuuuu</controlfield><controlfield tag="008">181210s2009 |||| o||u| ||||||eng d</controlfield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9781847194756</subfield><subfield code="9">978-1-84719-475-6</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">1847194753</subfield><subfield code="9">1-84719-475-3</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">1847194745</subfield><subfield code="9">1-84719-474-5</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9781847194749</subfield><subfield code="9">978-1-84719-474-9</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(ZDB-4-ITC)ocn635504316</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)635504316</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)BVBBV045348872</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">rda</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="082" ind1="0" ind2=" "><subfield code="a">005.8</subfield><subfield code="2">22</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Mischel, Magnus</subfield><subfield code="e">Verfasser</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">ModSecurity 2.5</subfield><subfield code="b">securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide</subfield><subfield code="c">Magnus Mischel</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Birmingham, U.K.</subfield><subfield code="b">Packt Pub.</subfield><subfield code="c">2009</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">1 online resource (ix, 261 pages)</subfield><subfield code="b">illustrations</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">c</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">cr</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="490" ind1="0" ind2=" "><subfield code="a">From technologies to solutions</subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">With more than 67% of web servers running Apache and web-based attacks becoming more and more prevalent, web security has become a critical area for web site managers. Most existing tools work on the TCP/IP level, failing to use the specifics of the HTTP protocol in their operation. Mod_security is a module running on Apache, which will help you overcome the security threats prevalent in the online world. A complete guide to using ModSecurity, this book will show you how to secure your web application and server, and does so by using real-world examples of attacks currently in use. It will help you learn about SQL injection, cross-site scripting attacks, cross-site request forgeries, null byte attacks, and many more so that you know how attackers operate. Using clear, step-by-step instructions this book starts by teaching you how to install and set up ModSecurity, before diving into the rule language with examples. </subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">It assumes no prior knowledge of ModSecurity, so as long as you are familiar with basic Linux administration, you can start to learn right away. Real-life case studies are used to illustrate the dangers on the Web today _ you will for example learn how the recent worm that hit Twitter works, and how you could have used ModSecurity to stop it in its tracks. The mechanisms behind these and other attacks are described in detail, and you will learn everything you need to know to make sure your server and web application remain unscathed on the increasingly dangerous web. Have you ever wondered how attackers figure out the exact web server version running on a system? They use a technique called HTTP fingerprinting, and you will learn about this in depth and how to defend against it by flying your web server under a "false flag". </subfield></datafield><datafield tag="505" ind1="8" ind2=" "><subfield code="a">The last part of the book shows you how to really lock down a web application by implementing a positive security model that only allows through requests that conform to a specific, pre-approved model, and denying anything that is even the slightest bit out of line</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS / Internet / Security</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS / Networking / Security</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS / Security / General</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Firewalls (Computer security)</subfield><subfield code="2">blmlsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer security / Software</subfield><subfield code="2">blmlsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer security</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Firewalls (Computer security)</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Firewalls (Computer security)</subfield><subfield code="a">Computer security</subfield><subfield code="v">Software</subfield></datafield><datafield tag="912" ind1=" " ind2=" "><subfield code="a">ZDB-4-ITC</subfield></datafield><datafield tag="999" ind1=" " ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-030735525</subfield></datafield></record></collection> |
| id | DE-604.BV045348872 |
| illustrated | Illustrated |
| indexdate | 2024-07-10T08:15:38Z |
| institution | BVB |
| isbn | 9781847194756 1847194753 1847194745 9781847194749 |
| language | English |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-030735525 |
| oclc_num | 635504316 |
| open_access_boolean | |
| physical | 1 online resource (ix, 261 pages) illustrations |
| psigel | ZDB-4-ITC |
| publishDate | 2009 |
| publishDateSearch | 2009 |
| publishDateSort | 2009 |
| publisher | Packt Pub. |
| record_format | marc |
| series2 | From technologies to solutions |
| spelling | Mischel, Magnus Verfasser aut ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide Magnus Mischel Birmingham, U.K. Packt Pub. 2009 1 online resource (ix, 261 pages) illustrations txt rdacontent c rdamedia cr rdacarrier From technologies to solutions With more than 67% of web servers running Apache and web-based attacks becoming more and more prevalent, web security has become a critical area for web site managers. Most existing tools work on the TCP/IP level, failing to use the specifics of the HTTP protocol in their operation. Mod_security is a module running on Apache, which will help you overcome the security threats prevalent in the online world. A complete guide to using ModSecurity, this book will show you how to secure your web application and server, and does so by using real-world examples of attacks currently in use. It will help you learn about SQL injection, cross-site scripting attacks, cross-site request forgeries, null byte attacks, and many more so that you know how attackers operate. Using clear, step-by-step instructions this book starts by teaching you how to install and set up ModSecurity, before diving into the rule language with examples. It assumes no prior knowledge of ModSecurity, so as long as you are familiar with basic Linux administration, you can start to learn right away. Real-life case studies are used to illustrate the dangers on the Web today _ you will for example learn how the recent worm that hit Twitter works, and how you could have used ModSecurity to stop it in its tracks. The mechanisms behind these and other attacks are described in detail, and you will learn everything you need to know to make sure your server and web application remain unscathed on the increasingly dangerous web. Have you ever wondered how attackers figure out the exact web server version running on a system? They use a technique called HTTP fingerprinting, and you will learn about this in depth and how to defend against it by flying your web server under a "false flag". The last part of the book shows you how to really lock down a web application by implementing a positive security model that only allows through requests that conform to a specific, pre-approved model, and denying anything that is even the slightest bit out of line COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Firewalls (Computer security) blmlsh Computer security / Software blmlsh Computer security fast Firewalls (Computer security) fast Firewalls (Computer security) Computer security Software |
| spellingShingle | Mischel, Magnus ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide With more than 67% of web servers running Apache and web-based attacks becoming more and more prevalent, web security has become a critical area for web site managers. Most existing tools work on the TCP/IP level, failing to use the specifics of the HTTP protocol in their operation. Mod_security is a module running on Apache, which will help you overcome the security threats prevalent in the online world. A complete guide to using ModSecurity, this book will show you how to secure your web application and server, and does so by using real-world examples of attacks currently in use. It will help you learn about SQL injection, cross-site scripting attacks, cross-site request forgeries, null byte attacks, and many more so that you know how attackers operate. Using clear, step-by-step instructions this book starts by teaching you how to install and set up ModSecurity, before diving into the rule language with examples. It assumes no prior knowledge of ModSecurity, so as long as you are familiar with basic Linux administration, you can start to learn right away. Real-life case studies are used to illustrate the dangers on the Web today _ you will for example learn how the recent worm that hit Twitter works, and how you could have used ModSecurity to stop it in its tracks. The mechanisms behind these and other attacks are described in detail, and you will learn everything you need to know to make sure your server and web application remain unscathed on the increasingly dangerous web. Have you ever wondered how attackers figure out the exact web server version running on a system? They use a technique called HTTP fingerprinting, and you will learn about this in depth and how to defend against it by flying your web server under a "false flag". The last part of the book shows you how to really lock down a web application by implementing a positive security model that only allows through requests that conform to a specific, pre-approved model, and denying anything that is even the slightest bit out of line COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Firewalls (Computer security) blmlsh Computer security / Software blmlsh Computer security fast Firewalls (Computer security) fast Firewalls (Computer security) Computer security Software |
| title | ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide |
| title_auth | ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide |
| title_exact_search | ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide |
| title_full | ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide Magnus Mischel |
| title_fullStr | ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide Magnus Mischel |
| title_full_unstemmed | ModSecurity 2.5 securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide Magnus Mischel |
| title_short | ModSecurity 2.5 |
| title_sort | modsecurity 2 5 securing your apache installation and web applications prevent web application hacking with this easy to use guide |
| title_sub | securing your Apache installation and web applications : prevent web application hacking with this easy-to-use guide |
| topic | COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Firewalls (Computer security) blmlsh Computer security / Software blmlsh Computer security fast Firewalls (Computer security) fast Firewalls (Computer security) Computer security Software |
| topic_facet | COMPUTERS / Internet / Security COMPUTERS / Networking / Security COMPUTERS / Security / General Firewalls (Computer security) Computer security / Software Computer security Firewalls (Computer security) Computer security Software |
| work_keys_str_mv | AT mischelmagnus modsecurity25securingyourapacheinstallationandwebapplicationspreventwebapplicationhackingwiththiseasytouseguide |