Improving Web Application Security: Threats and - CGISecurity

754 Improving Web Application Security: Threats and CountermeasuresUsing Security Notification ServicesRegister to receive notifications of security bulletins released by Microsoft. Use thefollowing services:● Microsoft Security Notification Service at http://register.microsoft.com/subscription/subscribeme.asp?ID=135.●TechNet security Web site at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/current.aspAdditional ConsiderationsWhen bringing a new service online on an existing server, run MBSA to verify thepatches for the service have been applied prior to having the server and servicelistening on the network. For example, disconnect the network cable or applynetwork based rules that block the newly added service’s ports.Additional ResourcesFor related information, see the following resources:● For more information about Software Update Services, see:●●●●●●●●The SUS homepage at http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp.TechNet article, “Patch Management Using Microsoft Software UpdateServices” at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/msm/swdist/pmsusog.asp.Software Update Services Deployment white paper at http://www.microsoft.com/windows2000/windowsupdate/sus/susdeployment.asp.SUS Server with SP1 release notes and installation instructions athttp://www.microsoft.com/windows2000/windowsupdate/sus/sp1relnotes.asp.SUS Server with SP1 download page at http://www.microsoft.com/downloads/details.aspx?FamilyId=A7AA96E4-6E41-4F54-972C-AE66A4E4BF6C&displaylang=en.TechNet article, “Managing Security Hotfixes” at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tips/sechotfx.asp.TechNet article, “Enterprise Software Update Management using SystemsManagement Server 2.0 Software Update Services Feature Pack” athttp://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/sms/deploy/confeat/SMSFPDEP.asp.TechNet article, “Best Practices for Applying Service Packs, Hotfixes and SecurityPatches” at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bestprac/bpsp.asp.