This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "ApEx:Architecture"

From OWASP
Jump to: navigation, search
(New page: Hardening the Apache HTTP Web Server Remove pre-loaded modules Remove pre-installed content Don’t publicize names/versions of your running software Comprehensive Checklists “Securi...)
 
 
Line 1: Line 1:
 
Hardening the Apache HTTP Web Server
 
Hardening the Apache HTTP Web Server
 +
 
Remove pre-loaded modules
 
Remove pre-loaded modules
 +
 
Remove pre-installed content
 
Remove pre-installed content
 +
 
Don’t publicize names/versions of your running software
 
Don’t publicize names/versions of your running software
 +
 +
ServerSignature Off  (Removes server information from error pages)
 +
 +
ServerTokens Prod    (Removes server version from the HTTP header)
  
  
Line 8: Line 15:
  
 
Comprehensive Checklists
 
Comprehensive Checklists
 +
 
“Securing Oracle Application Server”� by Caleb Sima
 
“Securing Oracle Application Server”� by Caleb Sima
 +
 
“Hardening Oracle Application Server 9i and 10g”� by Alexander Kornbrust
 
“Hardening Oracle Application Server 9i and 10g”� by Alexander Kornbrust

Latest revision as of 20:29, 21 November 2008

Hardening the Apache HTTP Web Server

Remove pre-loaded modules

Remove pre-installed content

Don’t publicize names/versions of your running software

ServerSignature Off (Removes server information from error pages)

ServerTokens Prod (Removes server version from the HTTP header)



Comprehensive Checklists

“Securing Oracle Application Server”� by Caleb Sima

“Hardening Oracle Application Server 9i and 10g”� by Alexander Kornbrust