Improving Web Application Security: Threats and - CGISecurity

474 Part IV: Securing Your Network, Host, and ApplicationSummaryA secure Web server provides a protected foundation for hosting your Webapplications. This chapter has shown you the main threats that have the potentialto impact your ASP.NET Web server and has provided the security steps requiredfor risk mitigation. By performing the hardening steps presented in this chapter,you can create a secure platform and host infrastructure to support ASP.NET Webapplications and Web services.The methodology used in this chapter allows you to build a secure Web server fromscratch and also allows you to harden the security configuration of an existing Webserver. The next step is to ensure that any deployed applications are correctlyconfigured.Additional ResourcesFor additional related reading, see the following resources:● For information about securing your developer workstation, see “How To: SecureYour Developer Workstation” in the “How To” section of this guide.● For more information about how to secure ASP.NET Web applications and Webservices, see Chapter 19, “Securing Your ASP.NET Application.”● For information on how the Open Hack application was configured, see theMSDN article, “Building and Configuring More Secure Web Sites,” athttp://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/openhack.asp.●●For security-related resources on TechNet, see the TechNet Security page,http://www.microsoft.com/technet/security/default.asp.For a printable checklist, see “Checklist: Securing Your Web Server” in the“Checklists” section of this guide.