Improving Web Application Security: Threats and - CGISecurity

Chapter 16: Securing Your Web Server 469Table 16.4 Snapshot of a Secure Web Server (continued)ComponentCharacteristicsCode Access SecurityCode Access Security Code Access Security is enabled for the machine.caspol -s OnLocalIntranet_ZoneInternet_ZoneLocal intranet zone has no permissions:PermissionSet=NothingInternet zone has no permissions:PermissionSet=NothingStaying SecureYou need to monitor the security state of your server and update it regularly to helpprevent newly discovered vulnerabilities from being exploited. To help keep yourserver secure:● Audit group membership.●●●●Monitor audit logs.Stay current with service packs and patches.Perform security assessments.Use security notification services.Audit Group MembershipKeep track of user group membership, particularly for privileged groups such asAdministrators. The following command lists the members of the Administratorsgroup:net localgroup administratorsMonitor Audit LogsMonitor audit logs regularly and analyze the log files by manually viewing them oruse the technique describe in Microsoft Knowledge Base article 296085, “How To: UseSQL Server to Analyze Web Logs.”