March 2008
Intermediate to advanced
816 pages
24h 25m
English
Next to reducing its surface area, the most effective strategy to reduce the risk of a successful attack on your Web server is to configure your applications to run with the least privilege possible. Doing this minimizes the amount of damage that results if an attacker successfully exploits any known or future vulnerability. Similar to reducing the surface area, this technique is not limited to blocking specific threats—it works well for any threat that may be present in your application today or that may be found in the future.
The key to reducing the privilege of the application code in the IIS environment is to understand the identity under which the code executes, select the identity with the minimal ...
Read now
Unlock full access