Modsecurity Handbook - Softcover

Ristic, Ivan

3.88

17 ratings by Goodreads

Softcover

ISBN 10: 1907117024 ISBN 13: 9781907117022

Publisher: Feisty Duck, 2010

View all copies of this ISBN edition:

Please note that this book was last updated in April 2012, even though the ISBN number and the publication date remain the same as for the first edition.

ModSecurity Handbook is the definitive guide to ModSecurity, a popular open source web application firewall. Written by Ivan Ristic, who designed and wrote much of ModSecurity, this book will teach you everything you need to know to monitor the activity on your web sites and protect them from attack.

Situated between your web sites and the world, web application firewalls provide an additional security layer, monitoring everything that comes in and everything that goes out. They enable you to perform many advanced activities, such as real-time application security monitoring, access control, virtual patching, HTTP traffic logging, continuous passive security assessment, and web application hardening. They can be very effective in preventing application security attacks, such as cross-site scripting, SQL injection, remote file inclusion, and others. Considering that most web sites today suffer from one problem or another, ModSecurity Handbook will help anyone who has a web site to run.
The topics covered include:

Installation and configuration of ModSecurity
Logging of complete HTTP traffic
Rule writing
IP address, session, and user tracking
Session management hardening
Whitelisting, blacklisting, and IP reputation management
Advanced blocking strategies
Integration with other Apache modules
Working with rule sets
Virtual patching
Performance considerations
Content injection
XML inspection
Writing rules in Lua
Extending ModSecurity in C

The book is suitable for all reader levels: it contains step-by-step installation and configuration instructions for those just starting out, as well as detailed explanations of the internals and discussion of advanced techniques for seasoned users. A comprehensive reference manual is included in the second part of the book.

Digital version of ModSecurity Handbook (PDF and EPUB) can be obtained directly from the author, at feistyduck.com.

"synopsis" may belong to another edition of this title.

About the Author:

Ivan Ristic is a security researcher, engineer, and author, known especially for his contributions to the web application firewall field and development of ModSecurity, an open source web application firewall, and for his SSL/TLS and PKI research, tools and guides published on the SSL Labs web site.

He is the author of two books, Apache Security and ModSecurity Handbook, which he publishes via Feisty Duck, his own platform for continuous writing and publishing. Ivan is an active participant in the security community and you'll often find him speaking at security conferences such as Black Hat, RSA, OWASP AppSec, and others. He's currently Director of Application Security Research at Qualys.

"About this title" may belong to another edition of this title.