Apache Web Server Hardening

在本课程中，我们教授 Apache Web 服务器强化。我们介绍了 Web 服务器强化是什么以及为什么它在运行 Web 服务器的过程中起着至关重要的作用。我们回顾了可以执行的几种配置，以帮助尽可能保护我们的 Apache Web 服务器。此外，我们还讨论了 Apache 容易受到的不同类型的漏洞。Apache HTTP Server 是一个免费的开源 Web 服务器，它运行着当今大约 45% 的网站，这就是为什么学习如何正确保护它非常重要的原因。

Web 服务器在许多情况下位于网络的边缘，因此它们比网络的其他部分更容易受到攻击。Web 服务器总是通过脚本手动和自动地以请求为目标。在本课程的开头，我们将介绍 Web 服务器强化并教授如何正确安装和配置 Apache 服务器。所有步骤都将在 Centos7 上执行，但我们可以在其他 Linux 操作系统上使用相同的命令。请记住，安装过程正是服务器加固过程开始的地方。进行正确的安装和配置以保护服务器并使其不易受到攻击非常重要。请记住，很容易绕过默认设置。

此外，我们还介绍了如何正确配置防火墙。我们分享一些基本的 firewalld 概念和术语，如区域、实例、firewalld 命令和黑名单。随后，我们介绍了其他几个主题。例如，我们深入研究了 Security-Enhanced Linux (SELinux)，看看为什么将它与 Apache 一起使用很重要，以及它如何使我们受益。SELinux 代表强制访问控制 (MAC)，允许对文件、设备、网络和进程间通信等资源进行细粒度的访问控制。在许多情况下，管理员禁用 SELinux，因为它会导致 Apache 出现问题，并且没有足够的时间在系统中正确配置所有内容。这通常会导致安全性降低。

本课程介绍的一些实用技能是如何创建自动化脚本、管理 apache 目录访问、执行日志检查以及利用众所周知的漏洞 ShellShock 来利用服务器。自动化脚本使我们能够自动执行服务器和 SELinux 检查，这在一次处理数千甚至数百万个 Apache 实例时是必要的。我们根据自己的需要创建自己的自动化脚本，但我们也可以随时合并其他人编写的脚本。我们还使用 tcdump 工具创建了一个捕获文件，以便我们可以识别系统中是否有任何可疑的事情发生。如果检测到可疑内容，我们将检查 Wireshark 中的流量。

另一个涵盖的是日志。日志记录在任何系统中都是必不可少的。我们分享了如何为一般和特定流量配置我们自己的日志级别。在本课程结束时，您将对 Apache 服务器有更好的了解，并更加了解它所面临的危险。您还可以更安全地设置和配置系统的各个部分，以及搜索潜在威胁。

Video: .MP4, 1920×1080 30 fps | Audio: AAC, 44.1 kHz, 2ch | Duration: 19h 26m
Genre: eLearning | Language: English | Size: 3.65 GB

In this course, we teach about Apache web server hardening. We cover what web server hardening is and why it plays a crucial part in the process of running a web server. We go over several configurations we can perform to help secure our Apache web server as much as possible. In addition, we talk about the different kinds of vulnerabilities Apache is susceptible to. Apache HTTP Server is a free open-source web server that runs approximately 45% of today’s websites, which is why learning how to properly secure it is extremely important.

Web servers are in many cases located at the edges of networks, so they are exposed to attacks more frequently than other parts of networks. Web servers are always targeted with requests, both manually and automatically, through scripts. At the beginning of this course, we provide an introduction to web server hardening and teach how to properly install and configure an Apache server. All steps will be performed on Centos7, but we could use the same commands for other Linux operating systems. Keep in mind that the installation process is precisely where the process of server hardening begins. It is very important to conduct a proper installation and configuration in order to protect the server and make it less vulnerable. Remember that default settings are easily bypassed.

Moreover, we also cover how to configure a firewall correctly. We share some basic firewalld concepts and terms like zones, instances, firewalld commands, and blacklists. Subsequently, we present several other topics. For example, we dive into Security-Enhanced Linux (SELinux) and see why it is important to use it with Apache and how it benefits us. SELinux represents mandatory access controls (MAC), allowing fine-grain access controls for resources such as files, devices, networks, and inter-process communication. In many cases, administrators disable SELinux because it causes complications with Apache and there is not enough time to configure everything correctly in the system. This usually results in decreased security.

Some practical skills this course imprats are how to create automated scripts, manage apache directory access, perform log examination, and exploit a server using a well-known vulnerability: ShellShock. Automated scripts enable us to perform server and SELinux checks automatically, which is necessary when handling thousands or even millions of Apache instances at once. We create our own automated script for our needs, but we can always incorporate scripts written by others as well. We also create a capture file using the tcdump tool so we can recognize if there’s anything suspicious going on in the system. If something suspicious is detected, we will then inspect the traffic in Wireshark.

Another covered is logs. Logging is essential in any system. We share how to configure our own log level for both general and specific traffic. By the end of this course, you will have a better understanding of the Apache server and be more aware of the dangers it’s exposed to. You will also be able to set up and configure various parts of the system more securely, as well as search for potential threats.