Improving Web Application Security: Threats and - CGISecurity

404 Part IV: Securing Your Network, Host, and ApplicationFilteringPort BlockingIDSFilteringPort BlockingIDSIsolates TrafficFilteringWeb ServerDatabaseServerInternetRouterSwitchDataStoreFirewallFigure 15.1Network components: router, firewall, and switchHow to Use This ChapterThis chapter provides a methodology and steps for securing a network. Themethodology can be adapted for your own scenario. The steps put the methodologyinto practice.To get most out of this chapter:● Read Chapter 2, “Threats and Countermeasures.” This will give you a betterunderstanding of potential threats to Web applications.● Use the snapshot. Table 15.3, which is at the end of this chapter, provides asnapshot of a secure network. Use this table as a reference when configuring yournetwork.● Use the Checklist. Use “Checklist: Securing Your Network” in the “Checklist”section of this guide, to quickly evaluate and scope the required steps. Thechecklist will also help you complete the individual steps.● Use vendor details to implement the guidance. The guidance in this chapter isnot specific to specific network hardware or software vendors. Consult yourvendor’s documentation for specific instructions on how to implement thecountermeasures given in this chapter.