This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Secure Configuration Guide"
(→News and Events) |
(→Acknowledgements) |
||
| Line 103: | Line 103: | ||
* [[User:Alexander_Antukh|Alexander Antukh]] | * [[User:Alexander_Antukh|Alexander Antukh]] | ||
* [[User:Dnkolegov|Denis Kolegov]] | * [[User:Dnkolegov|Denis Kolegov]] | ||
| + | * [[User:Makash|Akash Mahajan]] | ||
| + | * [[User:Anant_Shrivastava|Anant Shrivastava]] | ||
We hope you find the information in the OWASP Secure Configuration Guide useful. Please contribute back to the project by sending your comments, questions, and suggestions to the OWASP SCG mailing list. Thanks! | We hope you find the information in the OWASP Secure Configuration Guide useful. Please contribute back to the project by sending your comments, questions, and suggestions to the OWASP SCG mailing list. Thanks! | ||
Revision as of 14:20, 22 December 2014
|
The OWASP Secure Configuration GuideThere are small unclassified parts of info of configuration issues on OWASP currently; this project is to create unified document of issues and solutions to avoid common misconfigurations in popular frameworks, web servers, network devices and more. The latest version of wiki is accessible here: https://www.owasp.org/index.php/Secure_Configuration_Guide
DescriptionAll of us know such situations when robust and secure solution makes your defense even weaker if misconfigured. Nearly in every penetration testing report exists a chapter "Server/Framework/Service misconfiguration". Whereas using standard up-to-date impenetrable(*) software is certainly a good thing, one should consider proper configuration in order to verify its soundness. This project is useful for both defenders, who can learn the proper way of configuring rapidly growing number of different popular software, and attackers, as a good complement to Testing Guide.
(*) Saying "impenetrable" we mean all public vulnerabilities are patched in the most recent version. 0-days are still a threat but it's a different talk. LicensingThe OWASP Secure Configuration Guide is free to use. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. |
Project Leader
PresentationIntroduction to OWASP Secure Configuration Project.pptx
Related Pages
|
News and Events
In PrintThis project can be purchased as a print on demand book from Lulu.com
Classifications
| |||||||
