With more services being offered online and the growing electronic storage of personal data, cyber-attacks are also on the rise. Installing a web server may be as easy as a few simple clicks, but is it safe? In this course, Auditing IIS Web Servers for Security and Best Practice, you’ll learn how to audit your web server’s system security and how to reduce the risk of your site and data being compromised. First, you’ll learn how to audit your HTTPS usage and lower your attack surface. Then, you’ll learn how to protect against well-known vulnerabilities. Finally, you’ll learn how to build a rock-solid configuration that draws upon best practices and mitigation techniques against common attacks. Upon course completion, you’ll have the skills and knowledge to audit and secure your web server against online threats.
Author Name: Peter Kyrannis
Author Description:
Peter is an affiliate of the Institute of Information Security Professionals (IISP) and has provided security focused infrastructure solutions to a range of industry sectors. With over 10 years’ experience, he has acquired the skills of a Technical Information Security Officer (TISO) by hardening and remediating vulnerabilities affecting servers running Windows, Linux, IBM iSeries, SQL, and cloud platforms for the purpose of credit card payment security and ensured compliance with PCI DSS, Cyber… more

Table of Contents

• Course Overview
  1min
• Auditing Your HTTPS Usage
  26mins
• Auditing Your Attack Surface
  24mins
• Auditing Against Common Known Vulnerabilities
  9mins
• Auditing IIS Segregation
  8mins
• Auditing IIS Authentication and Authorization
  10mins
• Mitigating Attack Vectors
  14mins
• Auditing IIS Integrity
  5mins