This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Secure Configuration Guide"
(→Related Projects) |
m (→Related Projects) |
||
| Line 53: | Line 53: | ||
* [https://www.owasp.org/index.php/Configuration OWASP Development Guide: Chapter on Configuration] | * [https://www.owasp.org/index.php/Configuration OWASP Development Guide: Chapter on Configuration] | ||
* [https://www.owasp.org/index.php/Testing_for_configuration_management OWASP Testing Guide: Configuration Management] | * [https://www.owasp.org/index.php/Testing_for_configuration_management OWASP Testing Guide: Configuration Management] | ||
| − | * [https://www.owasp.org/index.php/ | + | * [https://www.owasp.org/index.php/Insecure_Configuration_Management Insecure Configuration Management page ] |
Revision as of 10:36, 25 November 2014
|
The OWASP Secure Configuration GuideThere are small unclassified parts of info of configuration issues on OWASP currently; this project is to create unified document of issues and solutions to avoid common misconfigurations in popular frameworks, web servers, network devices and more. The latest version of wiki is accessible here: https://www.owasp.org/index.php/Secure_Configuration_Guide
DescriptionAll of us know such situations when robust and secure solution makes your defense even weaker if misconfigured. Nearly in every penetration testing report exists a chapter "Server/Framework/Service misconfiguration". Whereas using standard up-to-date impenetrable(*) software is certainly a good thing, one should consider proper configuration in order to verify its soundness. This project is useful for both defenders, who can learn the proper way of configuring rapidly growing number of different popular software, and attackers, as a good complement to Testing Guide.
(*) Saying "impenetrable" we mean all public vulnerabilities are patched in the most recent version. 0-days are still a threat but it's a different talk. LicensingThe OWASP Secure Configuration Guide is free to use. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. |
Project Leader
Related Projects
|
News and Events
In PrintThis project can be purchased as a print on demand book from Lulu.com
Classifications
| |||||||
