Office of Information Technology (OIT)
www.oit.umn.edu
oitweb@umn.edu

Overview

Incident Response

Help & Support

About Us

Charter

Office of Information Technology (OIT) > Security Information for IT Professionals > Awareness and Education Topics > Web Applications and Servers

Web Applications and Servers

Web Applications

Ten Most Critical Web Application Security Risks for 2010 (PDF) - OWASP
Top 25 Most Dangerous Software Errors - CWE & SANS
Open Web Application Security Project (OWASP)
World Wide Web Security FAQ - Lincoln Stein
Web Tips - Advosys Consulting
Paper on Web Server Attack Signatures - cgisecurity.com

Web Servers

Apache

Securing Apache Step by Step - Security Focus
Securing Apache 2 Step by Step - Security Focus

Microsoft IIS

IIS 6.0 Technical Resources - Microsoft
Securing IIS 5.0 Resource Guide - Microsoft
Securing IIS 4.0 Resource Guide - Microsoft
Security Guidance for IIS - Microsoft
Securing IIS Servers - WindowsSecurity.com

PHP

Securing PHP - Hardened-PHP Project
robots.txt- Risks & Alternatives (PDF) - Ben Allen, U of M

University Tools

Qualys Vulnerability & Web Application Scan

© 2009–2013 Regents of the University of Minnesota. All rights reserved.
The University of Minnesota is an equal opportunity educator and employer
Last modified on 4/2/2012 9:25 AM