web-chksht-dec02 mse安全攻防资料 checklist

《web-chksht-dec02 mse安全攻防资料 checklist》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、WEBSERVICESSRRRESULTSREPORT/WORKSHEETDECEMBER2002V3R1Reviewer:Date:FindingTotals:Comments:CategoryI:CategoryII:CategoryIII:CategoryIV:Total:SiteInformation:Site/WebInstance/Url:SystemAdministrator/SystemsProgrammerInformation:Name:E-mailAddress:Phone#(Commercial):()DSN:ISSO/ISSMInfo

2、rmation:Name:E-mailAddress:Phone#(Commercial):()DSN:WebManagerInformation:Name:E-mailAddress:Phone#(Commercial):()DSN:SystemInformation:SystemHostName:Domain:oStandaloneDNSHostname:DNSDomain:TCP/IPAddress(es):TCP/IPAddress(es):13CatI__CatII__CatIII__CatIV__SystemInformationHardwareD

3、escription:(includeCMOS)SystemLocation(building/room):ConsoleLocation:SystemClassification:oUNCLASSIFIEDoSECREToCONFIDENTIALoOperatingSystem(s)usedonthissystem:oWindowsNTServer4.0oSolarisver.___________oWindowsNTWorkstation4.0oHP-UXver.___________oWindows2000ServeroOtherUNIXName:___

4、_____ver.:___________oMainframeOS:Name:_________Ver._______ServerType:SystemWorkload:oOpen*oAdministrativeoLimitedoApplicationoCertificate-basedoDatabaseApp.oOther:ExplainoDatabaseoDirectoryForServerTypeseeWebApplicationSTIG,Table1,page2orWebApplicationChecklistProcedures,page11.ooO

5、ther:WebServerSoftware:(circleone)ApacheVer._______IIS4.0IIS5.0IIS5.1IIS6.0NetscapeVer._______ESMManagerName:PolicyID:*IftheservertypeisOpen,allLimitedandCertificate-basedcheckswillbemarkedNA.Conversely,iftheservertypeisLimitedandCertificate-based,allOpencheckswillbemarkedNA**ForaMi

6、crosoftIISwebserverallWN*checkswillbemarkedNA.ForaniPlanet,NetscapeorSUNONEvwebserverallWI*checkswillbemarkedNA.13CatI__CatII__CatIII__CatIV__UNCLASSIFIEDInformationSupportServerIWebServicesChecklistV3FieldSecurityOperationsDecember2002DefenseInformationSystemsAgencyFindingDetailsP

7、rocedureSectionHeadingsFindingInformationPDIInformationMan.ScriptStatusDetailsPDIDescriptionCat.CheckProce-dures,page17-oFindingoNotaFindingoNotApplicableoNotReviewedoDocumentedproceduresforreviewingcontentpriortopostingtoaproductionwebserverarenotpresent.WA030Webcontentisnotreviewe

8、dandapprovedbyprope