Improving Web Application Security: Threats and - CGISecurity

xxxivImproving Web Application Security: Threats and CountermeasuresRemoting ............................................................................................................... 668Port Considerations ............................................................................................ 668Hosting in ASP.NET with the HttpChannel ............................................................. 669Hosting in a Custom Process with the TcpChannel ................................................ 670Database Server Configuration ................................................................................ 670Patches and Updates .......................................................................................... 671Services............................................................................................................. 671Protocols............................................................................................................ 671Accounts............................................................................................................ 672Files and Directories ........................................................................................... 673Shares............................................................................................................... 673Ports.................................................................................................................. 674Registry ............................................................................................................. 674Auditing and Logging ........................................................................................... 675SQL Server Security ............................................................................................ 675SQL Server Logins, Users, and Roles.................................................................... 676SQL Server Database Objects.............................................................................. 677Network Configuration ............................................................................................. 677Router................................................................................................................ 678Firewall .............................................................................................................. 679Switch................................................................................................................ 679Summary ............................................................................................................... 680Related Security Resources 681Related Microsoft patterns & practices Guidance ...................................................... 681Security-Related Web Sites ...................................................................................... 681Microsoft Security-Related Web Sites ................................................................... 681Third-Party, Security-Related Web Sites ................................................................. 682Microsoft Security Services ..................................................................................... 682Partners and Service Providers ................................................................................ 682Communities and Newsgroups................................................................................. 683Newsgroup Home Pages...................................................................................... 683Patches and Updates .............................................................................................. 683Service Packs..................................................................................................... 683Alerts and Notification............................................................................................. 684Microsoft Security Notification Services ................................................................ 684Third Party Security Notification Services .............................................................. 684Additional Resources .............................................................................................. 684Checklists and Assessment Guidelines ................................................................ 684Common Criteria................................................................................................. 685Reference Hub.................................................................................................... 685Security Knowledge in Practice............................................................................. 685Vulnerabilities..................................................................................................... 685World Wide Web Security FAQ............................................................................... 685