Kevin and I will be presenting this session at the IOUG conference. If you are attending the conference I hope you will sit in. Here are the details:
ID: 712
TITLE: Project Lockdown
– OHS Web Server Edition
DATE: Tuesday, April 20,
2010
TIME: 4:30:00 PM until 5:30:00
PM
ROOM: MANDALAY K
Collaborate10 IOUG Session 712 - Project Lockdown - OHS Web Server Edition
This presentation provides practical solutions for securing your Oracle HTTP Server (OHS). It follows the approach that was used with Project Lockdown for the database to provide a phased approach to securing the web server. The introduction explains the differences in web server setup based on usage, from reverse proxy server to J2EE Application server front-end. The presentation then walks through each of the phases providing specific details in the form of scripts and tools that can be used to execute the task. Phase 1 covers the basic setup and hardening that should be done as part of the install. Phase 2 focuses on advanced hardening and verifying the setup using Grid Control. Phase 3 identifies what to look for when monitoring the web server, and how to set appropriate policy monitoring. Phase 4 looks at the 11g Application Server and new features and capabilities that should be considered with an 11g upgrade.
Presentation in Powerpoint format
Download 2010_712_Mulreany_ppt-20100415
Presentation in PDF format
Download 2010_712_Mulreany_ppt-20100415
White Paper in MS Word format
Download 2010_712_mulreany_ppr
White Paper in PDF format
Download 2010_712_mulreany_ppr