Apache Security 

1 2 3

• 1. Apache Security

• 2. Table of Contents

• 3. Dedication

  Dedication

• 4. Copyright

• 5. Preface

  Preface

• 6. Audience

  Audience

• 7. Scope

  Scope

• 8. Contents of This Book

  Contents of This Book

• 9. Online Companion

  Online Companion

• 10. Conventions Used in This Book

  Conventions Used in This Book

• 11. Using Code Examples

  Using Code Examples

• 12. We d Like to Hear from You

  We d Like to Hear from You

• 13. Safari Enabled

  Safari Enabled

• 14. Acknowledgments

  Acknowledgments

• 15. Chapter 1. Apache Security Principles

  Chapter 1. Apache Security Principles

• 16. Section 1.1. Security Definitions

  1.1. Security Definitions

• 17. Section 1.2. Web Application Architecture Blueprints

  1.2. Web Application Architecture Blueprints

• 18. Chapter 2. Installation and Configuration

  Chapter 2. Installation and Configuration

• 19. Section 2.1. Installation

  Apache Backdoors 2.1. Installation

• 20. Section 2.2. Configuration and Hardening

  2.2. Configuration and Hardening

• 21. Section 2.3. Changing Web Server Identity

  2.3. Changing Web Server Identity

• 22. Section 2.4. Putting Apache in Jail

  Apache Slapper Worm 2.4. Putting Apache in Jail

• 23. Chapter 3. PHP

  Chapter 3. PHP

• 24. Section 3.1. Installation

  3.1. Installation

• 25. Section 3.2. Configuration

  3.2. Configuration

• 26. Section 3.3. Advanced PHP Hardening

  3.3. Advanced PHP Hardening

• 27. Chapter 4. SSL and TLS

  Chapter 4. SSL and TLS

• 28. Section 4.1. Cryptography

  4.1. Cryptography

• 29. Section 4.2. SSL

  4.2. SSL

• 30. Section 4.3. OpenSSL

  4.3. OpenSSL

• 31. Section 4.4. Apache and SSL

  4.4. Apache and SSL

• 32. Section 4.5. Setting Up a Certificate Authority

  4.5. Setting Up a Certificate Authority

• 33. Section 4.6. Performance Considerations

  4.6. Performance Considerations

• 34. Chapter 5. Denial of Service Attacks

  Chapter 5. Denial of Service Attacks The Alan Ralsky DoS

• 35. Section 5.1. Network Attacks

  5.1. Network Attacks

• 36. Section 5.2. Self-Inflicted Attacks

  5.2. Self-Inflicted Attacks

• 37. Section 5.3. Traffic Spikes

  5.3. Traffic Spikes

• 38. Section 5.4. Attacks on Apache

  5.4. Attacks on Apache

• 39. Section 5.5. Local Attacks

  5.5. Local Attacks

• 40. Section 5.6. Traffic-Shaping Modules

  5.6. Traffic-Shaping Modules

• 41. Section 5.7. DoS Defense Strategy

  5.7. DoS Defense Strategy

• 42. Chapter 6. Sharing Servers

  Chapter 6. Sharing Servers

• 43. Section 6.1. Sharing Problems

  6.1. Sharing Problems

• 44. Section 6.2. Distributing Configuration Data

  6.2. Distributing Configuration Data

• 45. Section 6.3. Securing Dynamic Requests

  6.3. Securing Dynamic Requests

• 46. Section 6.4. Working with Large Numbers of Users

  6.4. Working with Large Numbers of Users

• 47. Chapter 7. Access Control

  Chapter 7. Access Control

• 48. Section 7.1. Overview

  7.1. Overview

• 49. Section 7.2. Authentication Methods

  7.2. Authentication Methods

• 50. Section 7.3. Access Control in Apache

  7.3. Access Control in Apache

1 2 3