|
General
Information
Web
servers and FTP servers both perform similar functions and
have related security issues. If misconfigured or insufficiently
monitored, either can be exploited to gain access to computers
and private data. Ideally, you should avoid running either
of these types of servers except where it's absolutely necessary.
If you do run one of these servers, then you must make certain
that it's properly configured, keep up to date on patches
and other security issues, and carefully monitor the server.
There
are a number of excellent resources both at Berkeley Lab and
elsewhere on the web to help you safely configure and manage
these servers. Web
Security Notes has good information specific to the Lab
as well as lots of links to other sites. In
addition, this page provides information pertaining to the
popular IIS Web servers.
|
