4 ms·
The Apache STIG from DISA is a decent starting point for Apache. It takes some translation for modern versions of Apache, as well as newer technologies, but th
by specto 14y ago
The Apache STIG from DISA is a decent starting point for Apache. It takes some translation for modern versions of Apache, as well as newer technologies, but there is some sound information available. http://iase.disa.mil/stigs/a-z.html http://iase.disa.mil/stigs/a-z.html
- richadams 14y agoIn addition to these, there's also the CIS benchmarks. Apache HTTP: https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_HTTP_Server_Benchmark_v3.1.0.pdf https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_H... Tomcat: https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_Tomcat_Benchmark_v1.0.0.pdf https://benchmarks.cisecurity.org/tools2/apache/CIS_Apache_T...