Why audit a web server? Auditing web servers: IIS 4.0-Part 2

摘要

The first of these articles, in network Security's July issue, described how Web servers work, and suggested that the security objectives for them might differ from those for standard applications. It also discussed some basic procedural controls. This article complements it with a more detailed look at the security features in Microsoft IIS, and then at how to apply those features together with operating system controls, to help secure the site.