Web Security: A Step-by-step Reference Guide

Written for Web site administrators, developers, and end users, this book is a readable, real-world guide to securing your Web site with the latest in security technology, techniques, and tools. Lincoln D. Stein, keeper of the official World Wide Web Security FAQ, addresses your most pressing concerns and tells you exactly what you need to know to make your site more secure. He offers concise explanations of essential theory; helps you analyze and evaluate the risks and that threaten your site and the privacy of your clients; and provides concrete, step-by-step solutions, checklists of dos and don'ts, on-line and off-line resources, and hardware and software tools that guard your site against security breaches. Web Security approaches to topic from three different points of view - protecting the end user's confidentiality and the integrity of his or her machine, protecting the Web site from intrusion and sabotage and protecting both from third-party eavesdropping and tampering.

Web Security is designed as a checklist -- almost a mini tool kit -- that readers can use to first evaluate the security level of their site and to then implement security measures and protect their site from hostile intruders. Lengthy discussions of security theory are bypassed in favor of a practical step-by-step approach.

The book is a reference guide for Webmasters, IS managers, Network Administrators and System Administrators who are currently maintaining a site and need information on how to make it secure. Also covered are the risks and security solutions associated with implementing Internet services on a Web site -- including http, conferencing, email, ftp, and news gateways.
-- Web security is crucial to avoid loss of business revenue, credibility, and the disclosure of confidential data
-- Anyone responsible for a Web site or other Internet resources needs to be informed about this subject
-- Appendixes include complete resource listing of security vendors and tools, firewall solutions and resellers, and software patches designed to enhance security