论文部分内容阅读
黑客、病毒和蠕虫带来的安全问题层出不穷,微软的互联网信息服务器(Internet Information Server,IIS)成了众矢之的。明白这一点后,管理员必须准备执行大量的安全措施。我们在这里提供15个技巧,帮助管理员保护其IIS服务器。 1.保持Windows升级。管理员必须在第一时间升级,并为系统打好补丁,将所有更新下载到一个专用的服务器上,以Web的形式将文件发布出来。通过这些工作,可防止Web服务器接受直接的Internet访问。 2.使用IIS防范工具。这个工具有许多实用优点,然而,请慎用这个工具。如果Web服务器和其他服务器相互作用,请首先测试防范工具,以确定它已经被正确配置,保证不会影响Web服务器与其他服务器之间的通信。 3.删除缺省的Web站点。很多攻击者瞄准inetpub这个文件夹,并在里面放置
Security problems caused by hackers, viruses and worms are endless, and Microsoft’s Internet Information Server (IIS) becomes the target of public criticism. When you understand this, administrators must be prepared to perform a number of security measures. We are here to provide 15 tips to help administrators protect their IIS server. 1. Maintain Windows upgrade. Administrators must upgrade the first time, patch the system, download all the updates to a dedicated server, and publish the file in the form of Web. Through these efforts, Web servers can be protected from direct Internet access. 2. Use IIS prevention tools. This tool has many practical advantages, however, be careful with this tool. If the web server interacts with another server, first test the prevention tool to make sure it is properly configured, ensuring it does not affect the communication between the web server and other servers. 3. Remove the default Web site. Many attackers target inetpub this folder, and placed inside