Securing IIS Websites

Focused View

Jeremy Morgan

2:41:00

73 View

1. Course Overview

1. Course Overview.mp4

01:04

2. Securing Windows Systems

1. Introduction.mp4

00:59

2. Reducing Your Attack Surface.mp4

02:39

3. Updating Windows.mp4

04:48

4. Understanding Windows Firewall.mp4

02:13

5. Configuring Windows Firewall.mp4

05:09

6. Disabling Windows Services.mp4

03:24

7. Removing Windows Features.mp4

03:10

8. Securing Windows Accounts.mp4

05:42

9. Conclusion.mp4

00:40

3. Reducing IIS Vulnerabilities

1. Introduction.mp4

00:44

2. IIS Attack Surface.mp4

03:02

3. Reducing Exposed Information.mp4

05:20

4. IIS Vulnerabilities.mp4

05:57

5. Removing Unneeded IIS Modules.mp4

03:44

6. Locking Down Error Pages.mp4

03:40

7. IP Address Restrictions.mp4

05:39

8. HTTP Request Filtering.mp4

07:44

9. Summary.mp4

00:31

4. Leveraging SSL and TLS on Your IIS Server

1. Introduction.mp4

00:39

2. SSL Basics.mp4

04:43

3. Cipher Suites.mp4

04:21

4. Disabling TLS-SSL.mp4

02:30

5. Installing SSL Certificates.mp4

04:48

6. HTTP-2 and HTTP-3.mp4

04:51

7. Conclusion.mp4

00:33

5. Familiarizing Yourself with Exploits

1. Introduction.mp4

00:29

2. Buffer Overflow.mp4

03:33

3. CRLF Injection.mp4

02:35

4. Phishing.mp4

01:24

5. Cross Site Scripting.mp4

01:42

6. SQL Injection.mp4

03:40

7. Man in the Middle (MITM) Attacks.mp4

02:20

8. Brute Force - Dictionary Attacks.mp4

01:30

9. Summary.mp4

00:36

6. Securing Your Applications

1. Introduction.mp4

00:37

2. Managing Accounts.mp4

06:39

3. Cross-Origin Resource Sharing (CORS).mp4

04:27

4. Securing Application Pools.mp4

03:54

5. File and Folder Security.mp4

04:18

6. Handling Mappings.mp4

05:00

7. Authentication Methods.mp4

05:51

8. Summary.mp4

00:25

7. Monitoring Your Server

1. Introduction.mp4

00:33

2. Reviewing Access Logs.mp4

04:54

3. Event Tracing For Windows.mp4

03:06

4. Windows Event Viewer.mp4

02:09

5. Using Log Parser.mp4

04:53

6. Health and Diagnostics.mp4

03:45

7. Creating a Security Monitoring Plan.mp4

03:35

8. Summary.mp4

00:31

Description

In this course, you'll learn how to lock down your IIS server. You'll discover various methods of attack, how they work and how to prevent them. You'll learn how to monitor your server to prevent future attacks.

What You'll Learn?

In this course, Securing IIS Websites, you'll gain the ability to secure your IIS Webservers and prevent attacks. First, you'll explore how to reduce your attack surface to avoid attracting attackers to your site. Next, you'll discover how to lock down IIS to prevent attacks from being successful. Finally, you'll learn how to monitor your server to identify or prevent attacks from happening. When you’re finished with this course, you’ll have the skills and knowledge of IIS Security needed to keep your websites safe.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Windows Server

Jeremy Morgan

Instructor's Courses

Jeremy Morgan is on a mission to help developers get better at what they do. He's a Senior Developer Evangelist for Pluralsight, and an avid tech blogger and speaker. He has two decades of experience as an engineer building software for everything from Fortune 100 companies to tiny startups. He stays immersed in the .NET/Azure world while always keeping one foot in the Linux ecosystem building Python and Go applications. He's primarily focused on backend API development and cloud infrastructure, and finding new ways to deploy software safely and quickly. Jeremy enjoys teaching through his popular tech blog as well as contributing to open source as a .NET Foundation Member, and DevOps Institute Ambassador.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.