Modsecurity Handbook

Modsecurity Handbook
Author: Ivan Ristic
Publisher: Feisty Duck
Total Pages: 365
Release: 2010
Genre: Computers
ISBN: 1907117024

"ModSecurity Handbook is the definitive guide to ModSecurity, a popular open source web application firewall. Written by Ivan Ristić, who designed and wrote much of ModSecurity, this book will teach you everything you need to know to monitor the activity on your web sites and protect them from attack. ... The official ModSecurity Reference Manual is included in the second part of the book."--Back cover.

OpenSSL Cookbook

OpenSSL Cookbook
Author: Ivan Ristic
Publisher: Feisty Duck
Total Pages: 62
Release: 2013-10-03
Genre: Computers
ISBN: 1907117059

A guide to the most frequently used OpenSSL features and commands, written by Ivan Ristic. Comprehensive coverage of OpenSSL installation, configuration, and key and certificate management Includes SSL/TLS Deployment Best Practices, a design and deployment guide Written by a well-known practitioner in the field and the author of SSL Labs and the SSL/TLS configuration assessment tool Available in a variety of digital formats (PDF, EPUB, Mobi/Kindle); no DRM Continuously updated OpenSSL Cookbook is built around one chapter from Bulletproof SSL/TLS and PKI, a larger work that provides complete coverage of SSL/TLS and PKI topics. To download your free copy in various formats, visit feistyduck.com/books/openssl-cookbook/

Bulletproof SSL and TLS

Bulletproof SSL and TLS
Author: Ivan Ristic
Publisher: Feisty Duck
Total Pages: 528
Release: 2014
Genre: Computers
ISBN: 1907117040

Bulletproof SSL and TLS is a complete guide to using SSL and TLS encryption to deploy secure servers and web applications. Written by Ivan Ristic, the author of the popular SSL Labs web site, this book will teach you everything you need to know to protect your systems from eavesdropping and impersonation attacks. In this book, you’ll find just the right mix of theory, protocol detail, vulnerability and weakness information, and deployment advice to get your job done: - Comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI, with updates to the digital version - For IT security professionals, help to understand the risks - For system administrators, help to deploy systems securely - For developers, help to design and implement secure web applications - Practical and concise, with added depth when details are relevant - Introduction to cryptography and the latest TLS protocol version - Discussion of weaknesses at every level, covering implementation issues, HTTP and browser problems, and protocol vulnerabilities - Coverage of the latest attacks, such as BEAST, CRIME, BREACH, Lucky 13, RC4 biases, Triple Handshake Attack, and Heartbleed - Thorough deployment advice, including advanced technologies, such as Strict Transport Security, Content Security Policy, and pinning - Guide to using OpenSSL to generate keys and certificates and to create and run a private certification authority - Guide to using OpenSSL to test servers for vulnerabilities - Practical advice for secure server configuration using Apache httpd, IIS, Java, Nginx, Microsoft Windows, and Tomcat This book is available in paperback and a variety of digital formats without DRM.

Web Application Defender's Cookbook

Web Application Defender's Cookbook
Author: Ryan C. Barnett
Publisher: John Wiley & Sons
Total Pages: 563
Release: 2013-01-04
Genre: Computers
ISBN: 1118417054

Defending your web applications against hackers and attackers The top-selling book Web Application Hacker's Handbook showed how attackers and hackers identify and attack vulnerable live web applications. This new Web Application Defender's Cookbook is the perfect counterpoint to that book: it shows you how to defend. Authored by a highly credentialed defensive security expert, this new book details defensive security methods and can be used as courseware for training network security personnel, web server administrators, and security consultants. Each "recipe" shows you a way to detect and defend against malicious behavior and provides working code examples for the ModSecurity web application firewall module. Topics include identifying vulnerabilities, setting hacker traps, defending different access points, enforcing application flows, and much more. Provides practical tactics for detecting web attacks and malicious behavior and defending against them Written by a preeminent authority on web application firewall technology and web application defense tactics Offers a series of "recipes" that include working code examples for the open-source ModSecurity web application firewall module Find the tools, techniques, and expert information you need to detect and respond to web application attacks with Web Application Defender's Cookbook: Battling Hackers and Protecting Users.

Apache Security

Apache Security
Author: Ivan Ristic
Publisher:
Total Pages: 440
Release: 2005
Genre: Computers
ISBN:

"The complete guide to securing your Apache web server"--Cover.

Handbook of Machining with Grinding Wheels

Handbook of Machining with Grinding Wheels
Author: Ioan D. Marinescu
Publisher: CRC Press
Total Pages: 723
Release: 2016-02-22
Genre: Science
ISBN: 1482206706

Grinding is a crucial technology that employs specific abrasive processes for the fabrication of advanced products and surfaces. Handbook of Machining with Grinding Wheels, Second Edition highlights important industry developments that can lead to improved part quality, higher productivity, and lower costs. Divided into two parts, the book b

The MRCP PACES Handbook

The MRCP PACES Handbook
Author: Saira Ghafur
Publisher: CRC Press
Total Pages: 211
Release: 2017-05-18
Genre: Medical
ISBN: 1351792954

MRCP PACES is a challenging examination requiring in-depth clinical knowledge, excellent clinical skills and the ability to present each case concisely and coherently. This revision guide helps candidates achieve these aims; it is compact enough for bedside use and sufficiently comprehensive for self-study. The new edition follows the structure of the current PACES exam and has an expanded section on Station 5. As well as a wealth of up-to-date questions for practice, it includes extensive new clinical information on new therapies and details of the latest investigations and management options. Each chapter has been reviewed by senior clinicians within the specialty. • Presents all seven stations in one book • Provides practical hints and tips for success at each station • Presents much more comprehensive information in a compact and accessible format than other books • Provides evidence-based information, guidelines and questions mapping onto the latest examination format. This book teaches the candidate not only how to pass the PACES exam, leading the reader through each case and exactly what is expected of them, but also provides a succinct yet detailed clinical handbook for support on medical wards.

Cyber Operations

Cyber Operations
Author: Mike O'Leary
Publisher: Apress
Total Pages: 762
Release: 2015-10-23
Genre: Computers
ISBN: 1484204573

Cyber Operations walks you through all the processes to set up, defend, and attack computer networks. This book focuses on networks and real attacks, offers extensive coverage of offensive and defensive techniques, and is supported by a rich collection of exercises and resources. You'll learn how to configure your network from the ground up, starting by setting up your virtual test environment with basics like DNS and active directory, through common network services, and ending with complex web applications involving web servers and backend databases. Key defensive techniques are integrated throughout the exposition. You will develop situational awareness of your network and will build a complete defensive infrastructure—including log servers, network firewalls, web application firewalls, and intrusion detection systems. Of course, you cannot truly understand how to defend a network if you do not know how to attack it, so you will attack your test systems in a variety of ways beginning with elementary attacks against browsers and culminating with a case study of the compromise of a defended e-commerce site. The author, who has coached his university’s cyber defense team three times to the finals of the National Collegiate Cyber Defense Competition, provides a practical, hands-on approach to cyber security.

Application Delivery and Load Balancing in Microsoft Azure

Application Delivery and Load Balancing in Microsoft Azure
Author: Derek DeJonghe
Publisher: O'Reilly Media
Total Pages: 111
Release: 2020-12-04
Genre: Computers
ISBN: 109811583X

With more and more companies moving on-premises applications to the cloud, software and cloud solution architects alike are busy investigating ways to improve load balancing, performance, security, and high availability for workloads. This practical book describes Microsoft Azure's load balancing options and explains how NGINX can contribute to a comprehensive solution. Cloud architects Derek DeJonghe and Arlan Nugara take you through the steps necessary to design a practical solution for your network. Software developers and technical managers will learn how these technologies have a direct impact on application development and architecture. While the examples are specific to Azure, these load balancing concepts and implementations also apply to cloud providers such as AWS, Google Cloud, DigitalOcean, and IBM Cloud. Understand application delivery and load balancing--and why they're important Explore Azure's managed load balancing options Learn how to run NGINX OSS and NGINX Plus on Azure Examine similarities and complementing features between Azure-managed solutions and NGINX Use Azure Front Door to define, manage, and monitor global routing for your web traffic Monitor application performance using Azure and NGINX tools and plug-ins Explore security choices using NGINX and Azure Firewall solutions

Bulletproof TLS and PKI, Second Edition: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web Applications

Bulletproof TLS and PKI, Second Edition: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web Applications
Author: Ivan Ristic
Publisher: Feisty Duck
Total Pages: 512
Release: 2022-01-10
Genre: Computers
ISBN: 9781907117091

Bulletproof TLS and PKI is a complete guide to using TLS encryption and PKI to deploy secure servers and web applications. Written by Ivan Ristic, author of the popular SSL Labs web site, this book will teach you everything you need to know to protect your systems from eavesdropping and impersonation attacks. In this book, you'll find just the right mix of theory, protocol detail, vulnerability and weakness information, and deployment advice to get your job done: Comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI, with updates to the digital version For IT professionals, help to understand security risks For system administrators, help to deploy systems securely For developers, help to secure web applications Practical and concise, with added depth as needed Introduction to cryptography and the Internet threat model Coverage of TLS 1.3 as well as earlier protocol versions Discussion of weaknesses at every level, covering implementation issues, HTTP and browser problems, and protocol vulnerabilities Coverage of the latest attacks, such as BEAST, CRIME, BREACH, Lucky 13, RC4 biases, Triple Handshake Attack, and Heartbleed Thorough deployment advice, including advanced technologies, such as Strict Transport Security, Content Security Policy, and pinning Guide to using OpenSSL to generate keys and certificates and to create and run a private certification authority Guide to using OpenSSL to test servers for vulnerabilities This book is also available in a variety of digital formats directly from the publisher. Visit us at www.feistyduck.com.