Improving Web Application Security: Threats and - CGISecurity

688 Improving Web Application Security: Threats and CountermeasuresSecuring ChecklistsEach checklist in the securing series covers aspects of securing the servers based onroles. The checklists cover the following: patches and updates, services, protocols,accounts, files and directories, shares, ports, registry, and auditing and logging. Thesechecklists are:● Checklist: Securing Web Server. In addition to the common checklist informationcited previously, this checklist covers the following points that are specific to aWeb server: sites and virtual directories, script mappings, ISAPI filters, metabase,Machine.config, and code access security.● Checklist: Securing Database Server. In addition to the common checklistinformation cited previously, this checklist covers following points that are specificto a database server: SQL Server security; and SQL Server logins, users, and roles.Assessing ChecklistChecklist: Security Review for Managed Code helps you to uncover securityvulnerabilities in your managed code. This checklist covers the following:assembly-level checks, class-level checks, cryptography, secrets, exceptionmanagement, delegates, serialization, threading, reflection, unmanaged codeaccess, file I/O, event log, registry, environment variables and code access securityconsiderations.