Thursday, January 7, 2010
Securing OHS
There’s a technical paper over on SecureDBA covering the subject of securing the myriad of OHS (Oracle HTTP Server) versions out there.
Securing and Managing the Oracle HTTP Server by Kevin Sheehan and Brian Mulreany of Unisys is a free resource in pdf format. Get it, read it, and apply the advice contained therein. Includes extensive references to MetaLink notes and external resources like the Apache project, NIST and CIS.