Improving Web Application Security: Threats and - CGISecurity

442 Part IV: Securing Your Network, Host, and Application To unbind SMB from the Internet-facing port1. Click the Start menu, point to Settings, and click Network and Dial-upConnections.2. Right-click your Internet-facing connection, and click Properties.3. Clear the Client for Microsoft Networks box.4. Clear the File and Printer Sharing for Microsoft Networks box.Note The WINS tab of the Advanced TCP/IP Settings dialog box contains a Disable NetBIOS overTCP/IP radio button. Selecting this option disables the NetBIOS session service that uses TCP port139. It does not disable SMB completely. To do so, use the procedure above.Step 5. AccountsYou should remove accounts that are not used because an attacker might discoverand use them. Require strong passwords. Weak passwords increase the likelihood ofa successful brute force or dictionary attack. Use least privilege. An attacker can useaccounts with too much privilege to gain access to unauthorized resources.During this step, you:● Delete or disable unused accounts.●●●●●●●Disable the Guest account.Rename the Administrator account.Disable the IUSR Account.Create a custom anonymous Web account.Enforce strong password policies.Restrict remote logons.Disable Null sessions (anonymous logons).Delete or Disable Unused AccountsUnused accounts and their privileges can be used by an attacker to gain access to aserver. Audit local accounts on the server and disable those that are unused. Ifdisabling the account does not cause any problems, delete the account. (Deletedaccounts cannot be recovered.) Disable accounts on a test server before you disablethem on a production server. Make sure that disabling an account does not adverselyaffect your application operation.Note The Administrator account and the Guest account cannot be deleted.