Cyber Operations: Building, Defending, and Attacking Modern Computer Networks

© Mike O'Leary 2019

Mike O'LearyCyber Operationshttps://doi.org/10.1007/978-1-4842-4294-0_15

15.  IIS and ModSecurity

Mike O’Leary¹ 

(1)

Towson, MD, USA

 

Introduction

Microsoft Internet Information Services (IIS) is a web server available on Windows Server, as well as on Windows desktop systems. On Windows Server, it is considered a server role, and it is installed using the roles and features components. As a web server, IIS can run multiple web sites on multiple ports using multiple protocols. It can be managed locally or remotely through the graphical tool IIS Manager. Configuration information is stored in .xml configuration files that can be manipulated with command-line tools. Access to IIS web sites can be controlled in several ways, including ...