Servers 8.1 Implement Proper Web Server Configuration 8.2 Properly Configure Server-side SSL 8.3 Use Proper Session Management 8.4 Protect and Perform Penetration Testing of Web Services 8.5 Protect Internal Resources