Improving Web Application Security: Threats and - CGISecurity

Chapter 16: Securing Your Web Server 433Including Service Packs with a Base InstallationIf you need to build multiple servers, you can incorporate service packs directly intoyour Windows installations. Service packs include a program called Update.exe tocombine a service pack with your Windows installation files. To combine a service pack with a Windows installation1. Download the latest service pack.2. Extract Update.exe from the service pack by launching the service pack setup withthe -x option, as follows:w3ksp3.exe -x3. Integrate the service pack with your Windows installation source, by runningupdate.exe with the -s option, passing the folder path of your Windowsinstallation as follows:update.exe -s c:\YourWindowsInstallationSourceFor more information, see the MSDN article, “Customizing Unattended Win2KInstallations” at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnw2kmag01/html/custominstall.asp.Steps for Securing Your Web ServerThe next sections guide you through the process of securing your Web server. Thesesections use the configuration categories introduced in the “Methodology forSecuring Your Web Server” section of this chapter. Each high-level step contains oneor more actions to secure a particular area or feature.Step 1Patches and UpdatesStep 10Auditing and LoggingStep 2IISLockdownStep 11Sites and Virtual DirectoriesStep 3ServicesStep 12Script MappingsStep 4ProtocolsStep 13ISAPI FiltersStep 5AccountsStep 14IIS MetabaseStep 6Files and DirectoriesStep 15Server CertificatesStep 7SharesStep 16Machine.configStep 8PortsStep 17Code Access SecurityStep 9Registry