Re:Server Configuration - Basic Security Part 7
by specto on Wednesday July 25, 2012 @11:17AM
(#4291314)
The Apache STIG from DISA is a decent starting point for Apache. It takes some translation for modern versions of Apache, as well as newer technologies, but there is some sound information available. http://iase.disa.mil/stigs/a-z.html
[ Parent
| on HN ]
Re:Server Configuration - Basic Security Part 7
by richadams on Wednesday July 25, 2012 @12:14PM
(#4291584)
In addition to these, there's also the CIS benchmarks.
Apache HTTP: https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_H...
Tomcat: https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_T...