文档介绍：Securing a Linux Web Server - munity's Center for Security ?_content&task=v...
Securing a Linux Web Server
Source: InfoSec Institute
Posted by Anthony Pell
With the significant prevalence of Linux web servers globally, security is often touted as a strength of the platform
for such a purpose. However, a Linux based web server is only as secure as its configuration and very often many
are quite vulnerable promise. While specific configurations vary wildly due to environments or specific use,
there are various general steps that can be taken to insure basic security considerations are in place. Many risks
are possible from promise including using the web server into a source of malware, creating a spam
sending relay, a web or
TCP proxy, or other malicious activity. The operating system and packages can be fully patched with security updates and the
server can still promised based purely on a poor security configuration.
Security of web applications first begins with configuring the server itself with strict security in mind. Many will often deploy various
layers such as a WAF, IDS, or Mod Security to react in real time to various hacking and threats for HTTP requests. However,
securing the entire server and any running services with a high level of security in mind is the first fundamental step to avoid the
risk of being hacked promised.
With