OGH DBA Dag 14 september 2010 Frits Hoogland

More documents

Recommendations

Info

Instances New configuration setup– Used with ‘webtier’ and Weblogic server– Idea probably borrowed from Bea weblogic All variable files are put in directory structure– ‘Webtier’: OPMN, OHS, WebCache– Structure resides inside $ORACLE_HOME, in adirectory beneath ‘instances’48Tuesday, September 14, 2010
mod_security Apache module– Function: OSI Layer 7 firewall– Used to be installed with 10g AS- But not configured.– Not delivered anymore49Tuesday, September 14, 2010
Page 1: Oracle HTTP serversecurityOGH DBA D
Page 7 and 8: Firewall!7Tuesday, September 14, 20
Page 9 and 10: Firewallhost.example.comFirewallhos
Page 11 and 12: Firewall Examples of firewalls:- PI
Page 13 and 14: Architecturehost.example.comhost.dm
Page 15 and 16: Webserver Clients communicate with
Page 17 and 18: Tuesday, September 14, 201017
Page 19 and 20: Figure 6 shows the change over time
Page 26 and 27: How to harden? Webserver scanner: N
Page 28 and 29: Example: incorrect config We got a
Page 33 and 34: HTTPSQ: Does HTTPS make your site m
Page 37 and 38: HTTPS HTTPS encrypts communication-
Page 39 and 40: Scanning yourself To harden for the
Page 41 and 42: Information spilling- To ‘Prod’
Page 43 and 44: Information spilling No guarantee,
Page 45 and 46: Information spilling Web cache mana
Page 47: Ports < 1024 On Linux/Unix requires
Page 51 and 52: mod_security It’s easy to add mod
Page 53 and 54: mod_security Some of the rules it t
Page 55 and 56: Q & AThank you for attending!55Tues
Page 57 and 58: Bibliography & Links hping (packet

OGH DBA Dag 14 september 2010 Frits Hoogland

Create successful ePaper yourself

Delete template?

Save as template?