This document outlines security measures to protect a web server. It first introduces web servers as remote computers that deliver web content using HTTP and serve files like web pages. It then discusses features of web servers like virtual hosting and bandwidth throttling. The document defines security as freedom from danger and harm, including data security and uninterrupted service. Finally, it recommends security measures for web servers such as removing unnecessary services, restricting remote access and permissions, monitoring the server, keeping separate environments, using security tools, installing patches, and staying informed about new attacks.
2. Contents
2
• Introduction to web server
• Features of webservers
• Definition of Security
• Security measures to protect web server
3. Introduction to web server
3
• Remote computers or program, that delivers web contents.
• Give service through network .
• Give response according to request made through web
application (browser)
• Uses HTTP protocol to serve files (web pages)
• Apahce , IIS , Tomcat (Popular web server software's)
5. Features of webservers
5
• Virtual hosting
• Remote access
• Easy to manage application
• Support for large files
• Bandwidth throttling to regulate network traffic
• File management
6. Definition of Security
6
• State of being free from danger
• Prevent from being harm
• Data Security
• Service without interruption
7. Security measures to protect web server
7
• Take Away Unnecessary Services
• Remote Access
• Permission and Privileges
• Monitor and audit the server
• Separate development /testing / production environment
• Use security tools provided with web server software
• Install all security patches on time
• Stay Informed about new attacks
Block unnecessary ports and services to close the door
2. Remote Access
This by using encryption protocols. security tokens and other single sign-on equipment and software.
3. Permissions and Privileges
Therefore, it is very important to always assign the least amount of privileges, such as web server software.
4. Monitor and audit the server
Web server logins should be stored in a separate area. This way, website access, network services, database server and operating system logs can be monitored frequently. Making the audit easier.
5. Separate Development / Testing / Production environment
All applications can easily be found by unwanted users. So, development and testing should always be done on servers isolated from the Internet. This can help prevent intrusive behavior and other complications.
6. Use Security Tools Provided with Web Server Software
add an extra amount of security and with this, peace of mind.
7. Install All Security Patches On Time
this can enhance any security system.
8. Stay Informed
