ModSecurity Handbook is
"The definitive guide to the popular open source web application firewall",
written by Ivan Ristic (original author of ModSecurity). The book is available from Feisty Duck in hardcopy or with immediate access to the digital version which is continually updated.
ModSecurity 2.5 is
"A complete guide to using ModSecurity", written by Magnus Mischel. The book is available from Packt Publishing in both hardcopy and digital forms.
Apache Security is a comprehensive Apache Security resource, written by Ivan Ristic
for O'Reilly. Two chapters (Apache Installation and Configuration and PHP) are available as free
download, as are the Apache security tools created for the book.
Preventing Web Attacks with Apache. Building on his groundbreaking SANS presentations on Apache security, Ryan C. Barnett reveals why your Web servers represent such a compelling target, how significant exploits are performed, and how they can be defended against.
