Mask Your Web Server for Enhanced Security: ASP Alliance

Print Add To Favorites Email To Friend Rate This Article
Mask Your Web Server for Enhanced Security

page 1 of 14

Published: 01 Oct 2003

Unedited - Community Contributed

Abstract
Minimize the risk of detection of your OS and Web server vendor and version, particularly for Microsoft’s Internet Information Server (IIS) by removing identifying details that intruders could use to detect your OS and Web server vendor and version.

by Joe Lima
Feedback

Average Rating: This article has not yet been rated.
Views (Total / Last 10 Days): 54511/ 101

Article Contents:

Introduction

Masking or anonymizing a Web server involves removing identifying details that intruders could use to detect your OS and Web server vendor and version. This information, while providing little or no utility to legitimate users, is often the starting place for crackers, blackhat hackers and "script kiddies". This article explores some ways you can minimize the risk of such detection. Most of the following examples focus on Microsoft’s Internet Information Server (IIS), since it has been most widely lambasted for its vulnerabilities, but some Apache detection countermeasures are also covered. While IIS users probably have the most vested interest here, server anonymization is relevant to anyone responsible for administering a Web server.

View Entire Article

(Page 2) »

User Comments

No comments posted yet.

Product Spotlight