Abstract

TASSIO, Silva  and  FABIANA, Mendes. 3SW: A Set of Safeguards to Mitigate Vulnerabilities in Web Servers. RISTI [online]. 2024, n.56, pp.66-81.  Epub Dec 31, 2024. ISSN 1646-9895.  https://doi.org/10.17013/risti.56.66-81.

Web servers are often targeted for malicious attacks because they host various applications. Unfortunately, there are not many comprehensive guides available to help implement effective protection measures. This work aims to propose a model called the 3SW model, which is designed to help mitigate vulnerabilities in web servers. To develop this model, we selected the most relevant safeguards from the CIS Controls, focusing specifically on web servers and the effort required for implementation. Additionally, the 3SW model is compared with well-recognized cybersecurity approaches to validate its usefulness. The 3SW consists of 93 safeguards, representing 61% of the CIS Controls v8.1 safeguards. A comparison between the 3SW model and the MITRE ATT&CK framework revealed an 86% coverage, emphasizing log auditing, malware defense, and data recovery. Therefore, we concluded that the 3SW model presents an approach that facilitates strategic prioritization and efficient implementation of protective safeguards for web servers.

Keywords : CIS Controls; cybersecurity; information security; web server; safeguards..

        · abstract in Portuguese     · text in Portuguese     · Portuguese ( pdf )