Improving Web Application Security: Threats and - CGISecurity

684 Improving Web Application Security: Threats and CountermeasuresAlerts and NotificationMicrosoft Security Notification Services●●Virus alerts for Microsoft products at http://www.microsoft.com/technet/treeview/?url=/technet/security/virus/alerts/.Security Notification Service at http://register.microsoft.com/subscription/subscribeme.asp?ID=135.Use this service to register for regular e-mail bulletins that notify you of theavailability of new fixes and updates.Third Party Security Notification Services●●●●●CERT Advisory Mailing List at http://www.cert.org/contact_cert/certmaillist.html.Informative advisories are sent when vulnerabilities are reported.Windows and .NET Magazine Security UPDATE at http://email.winnetmag.com/winnetmag/winnetmag_prefctr.asp#Security.This announces the latest security breaches and corresponding fixes. It also givesadvice on reacting to vulnerabilities.NTBugtraq at http://www.ntbugtraq.com/default.asp?pid=31&sid=1#020.This is an open discussion of Windows security bugs and exploits. Vulnerablitiesthat do not have patches are discussed.Internet Storm Center at http://isc.incidents.org.This site tracks the frequency of worms, denial of service attacks, as well as otherkinds of attacks.Security Focus Web site at www.securityfocus.com.Additional ResourcesChecklists and Assessment Guidelines●●IIS 5.0 Security Checklist at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/chklist/iis5chk.asp.Security Tools and Checklists at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools.asp.