New del.icio.us Links14 June 2005 · Filed in Information
The article, Securing Web Services with mod_security, is a great introduction to an Apache module that I’ve known about and used for a while now. Similar to URLScan for IIS 5.0, mod_security serves to block malicious URLs and invalid requests, even within encrypted HTTPS sessions. As such, it acts as the perfect complement to firewalls and intrusion detection/prevention systems (both network-based and host-based), which typically operate at lower layers of the networking stack.
If you use Apache, I urge you to evaluate and deploy mod_security to enhance your web server’s security.Tags: Apache · OSS · Security · Web Previous Post: New Hyperlinking Convention Next Post: Some Cool Networking Stuff