Improving Web Application Security: Threats and - CGISecurity

680 Part V: Assessing Your SecuritySummaryWhen you perform a deployment review, make sure that you review theconfiguration of the underlying infrastructure on which the application is deployedand the configuration of the application itself. Review the network, host, andapplication configuration and, where possible, involve members of the various teamsincluding infrastructure specialists, administrators and developers.Use the configuration categories identified in this chapter to help focus the review.These categories include patches and updates, services, protocols, accounts, files anddirectories, shares, ports, registry, and auditing and logging.