Preventing Web Attacks with Apache

Index

Symbols

4XX, 340

5XX, 341

7350wu attack example (OS issues), 19–22

A

ab (Apache Benchmarking tool)

testing default configurations, 92–94

testing updated configurations, 97–99

abuse of functionality, 523

Abuse of Functionality attacks, 244–245

abusing Apache functionality, 348

Apache functionality abuse countermeasurues, 352

signature evasion with Mod_Spelling, 349–351

signature evasion with multiviews, 351–352

access control directives (httpd.conf file), 107–113

Allow and Deny directives, 111–112

authentication setup, 108–109

for authorization, 109, 111

for root directory, 113

actions (Mod_Security), 164–165

ActiveX Controls, 523

alert notification

examples of email alerts, 404–405

Code Red Worm, 405–406

Dshield, 412

Nessus vulnerability ...