Prevention

3. Server Hardening

   • NIST Guidelines on Securing Public Web Servers (http://csrc.nist.gov/publications/nistpubs/800-44/sp800-44.pdf)

   • NSA Guide to Secure Configuration and Administration of Microsoft Internet Information Services 5.0 version 1.4 (http://www.nsa.gov/snac/os/win2k/iis_5_v1_4.pdf)

   • CIS Apache Benchmarking and Scoring Tool (http://www.cisecurity.org/bench_apache.html)

   • Microsoft Checklist for Securing Your Web Server (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/CL_SecWebs.asp)