World Wide Web Security

Web Application Security

• Information Security from the Attacker's Perspective, a presentation by Gary Geisbert from Crucial Security. PPT | PDF (July 17, 2007)
• Site Profiling: An Attackers View of Your Web Site, a presentation by Dan Singhal. (August 29, 2006)
• Information Assurance @ Goddard: An SQL Injection Story, Panel Discussion Nov. 15, 2005
• Web Application Security, presentation by Michael Stone, November 9, 2005

 
• Open Web Application Security Programming (OWASP)
• SecurePHP Wiki
• PHP Advisory
• DHS security site
• Articles:
• Ten Security Checks for PHP, Part 1
• Writing Secure PHP
• JavaOne presentation on hacking websites

General Information

• How to Better Protect Your Web Server, a presentation to the GSFC Webmasters by Sven Dietrich
• World Wide Web Security FAQ
• Safe CGI Programming
   
  
• Goddard Domains List

Securing Unix

• Unix Configuration Guidelines

Securing Windows NT

• Windows NT Configuration Guidelines
• Windows NT Security and Configuration Resources
• Microsoft's Security Site
• Microsoft's List of Patches for IIS 5.0 (2000)
• Microsoft's List of Patches for IIS 4.0 (2000)

Curator: Emma Kolstad Antunes
NASA Official: Mark Walther
Last Updated: Tuesday July 17, 2007