论文部分内容阅读
对于一个完善的Web应用系统来说,其安全性是要考虑的一个重要问题。如何利用各种技术手段,对Web应用提供安全保护,是本文讨论的重点。 对Web服务器实现安全保护的技术很多,但经过归纳,可以将它们划归在不同的层次上,例如,有的技术是在文件系统层次上实现的,而有的技术是在网络协议层次上实现的。目前使用较多的操作系统平台有Windows NT、Unix和Linux等。本文主要讨论基于Windows NT的Web安全技术,但其主要技术也同样适用于Unix平台。在下面涉及到的实例中,操作系统使用Windows NT Server 4.0,Web服务器使用IIS 4.0。
For a complete Web application, its security is an important issue to consider. How to use a variety of technical means to provide security for Web applications is the focus of this article. There are many technologies for implementing Web server security, but after induction, we can classify them at different levels. For example, some technologies are implemented at the file system level, while others are implemented at the network protocol level of. Currently used more operating system platforms such as Windows NT, Unix and Linux. This article focuses on Windows NT-based Web security technology, but its main technology also applies to Unix platforms. In the following examples, the operating system uses Windows NT Server 4.0 and the Web server uses IIS 4.0.