Improving Web Application Security: Threats and - CGISecurity

788 Improving Web Application Security: Threats and CountermeasuresContents●●●●●●●●Before You BeginWhat You Must KnowScanning for Security Updates and PatchesScanning Multiple Systems for Updates and PatchesSQL Server and MSDE SpecificsScanning for Secure defaultsPitfallsAdditional ResourcesBefore You BeginInstall MBSA, using Mbsasetup.msi, to a tools directory. Copy the file Mssecure.cabto the MBSA installation directory.● Download MBSA. Download MBSA from the MBSA Home Page:http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/Tools/mbsahome.asp●Updates for MBSA. If the machine you use has Internet access, the latest securityXML file will be downloaded automatically, if needed. If your computer does nothave Internet access, you need to download the latest XML file using the signedCAB at the following location: http://download.microsoft.com/download/xml/security/1.0/NT5/EN-US/mssecure.cabThe CAB file is signed to ensure it has not been modified. You must uncompress itand store it in the same folder where MBSA is stored.Note To view the latest XML file without downloading it, use the following location:https://www.microsoft.com/technet/security/search/mssecure.xml●Default installation directory: \Program Files\Microsoft Baseline SecurityAnalyzer\Note You need to run commands from this directory. MBSA does not create an environmentvariable for you.