[Original] Microsoft baseline security analyzer tool Introduction
As we all know, when conducting security testing, you can start with deployment and infrastructure, input verification, identity verification, authorization, configuration management, sensitive data, session management, encryption, parameter operati
This document defines the security setting standards that the Information System Department maintains and manages Tomcat WEB servers. This document aims to guide system administrators in the secure configuration of Tomcat WEB servers. This article applies to tomcat Web servers 4.X, 5.x, and 6.x.Chapter 4 account management and authentication and authorization1.1 account1.1.1 shared Account ManagementSecurity basel
This document defines the security settings that should be followed by the Apache server maintained and managed by maintenance engineers. This document aims to guide system administrators in the Security Configuration of Apache servers. This document applies to versions 2.0.x and 2.2.x of Apache servers.Chapter 3 log configuration operations1.1 log Configuration1.1.1 Audit LogonSecurity
Document directory
Secure Windows 2000
Run the IIS Lockdown Tool
Customize UrlScan Configuration
Set appropriate ACLs on virtual directories
Set appropriate IIS Log file ACLs
Enable logging
Disable or remove all sample applications
Remove the IISADMPWD virtual directory
Remove unused script mappings
IIS 5.0 Baseline Security Checklist
On This Page
Introdu
GNU/Linux security baseline and Reinforcement
"With the popularity of GNU/Linux in IT infrastructure in various industries, security issues have become the focus of attention. GNU/Linux is mainly built by the GNU core (compiler GCC, C library Glibc, etc.) and Linux kernel combination, in the environment where free open source software dominates the basic platfor
After the Windows operating system is installed, many patches are installed. As new security vulnerabilities are discovered every month, many new patches need to be installed. How can I know whether I missed important updates, or how can I know the security of my system? Today we will introduce this free assistant, Microsoft Baseline
to close; "XFS" , this service is the font service for X window in Linux, and there are vulnerabilities such as information disclosure and denial of service in the history of the service that should reduce system risk, R service ("Rlogin", "rwho", "Rsh", "rexec"), there are serious security flaws in R service design, Available only for easy access between trusted hosts in a closed environment, must be disabled under other circumstances, INETD/XINETD-
Security Test Tool ---- install MobSF (static analyzer configuration), test tool ---- mobsf
MobSF can perform Security Testing and Analysis on ios and android, and perform static and dynamic analysis on apps. Currently, ios can only perform dynamic analysis, while android can perform static analysis, you can also perform dynamic analysis. This time, it mainly
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.