Skip to Content
Mac® Security Bible
book

Mac® Security Bible

by Joe Kissell
January 2010
Beginner to intermediate
936 pages
27h 45m
English
Wiley
Content preview from Mac® Security Bible

Chapter 18. Web Server Security

IN THIS CHAPTER

Understanding and preventing security issues that affect Macs running web servers

Requiring authentication to view portions of a website

Encrypting transmissions of web pages with SSL

Preventing attackers from installing malicious software using web forms

Protecting databases used to deliver web content

Apache, the world's most popular web server software, is built into every copy of Mac OS X. What's more, it takes just a few clicks to turn it on, making your Mac a web server you can use to run a personal or business website that the world can see. However, running a web server exposes your Mac to a number of additional risks and makes it much more of a target than it would otherwise be. In this chapter, I cover the fundamentals of protecting your Mac and its data while it's being used as a web server. Apart from configuring Apache and other parts of Mac OS X securely, you learn how to password-protect portions of your site, encrypt web pages with SSL, avoid common exploits and attacks, and, if applicable, keep any web-connected databases secure.

This chapter covers the sorts of things you should be concerned with when using the version of Apache in the standard version of Leopard or Snow Leopard and activated using the Sharing pane of System Preferences. Although most of the same general principles apply to other web servers, to custom builds of Apache, or to the version of Apache included with Mac OS X Server, I don't specifically ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Practical Internet of Things Security - Second Edition

Practical Internet of Things Security - Second Edition

Brian Russell, Drew Van Duren
How to Develop a Great Digital Strategy

How to Develop a Great Digital Strategy

Jeanne W. Ross, Cynthia M. Beath, Ina M. Sebastian
The Hidden Cost of AI-Assisted Creativity

The Hidden Cost of AI-Assisted Creativity

Léonard Boussioux, Anil Doshi, Oliver Hauser, Kartik Hosanagar
Are You an Authentic Leader or an Authentic Jerk?

Are You an Authentic Leader or an Authentic Jerk?

Hannes Leroy, Michael A. Daniels, Kristin L. Cullen-Lester, Alexandra Gerbasi

Publisher Resources

ISBN: 9780470474198Purchase book