IIS 7: A Security Pedigree
Internet Information Server (IIS) has been very much the poster child for Microsoft's Trustworthy Computing (TwC) initiative, and secure development practices in general. It takes a special focus and an attention to detail to engage in secure development practices that create truly secure software. In creating IIS version 6.0 for Windows Server 2003, Microsoft put that focus and attention to detail to work in the design, development, and testing phases.
As a result, in almost every Microsoft document on Secure Coding and TwC, IIS 6 is referred to as the example of the benefits achieved by following secure coding practices. As a testament to the work that went into IIS 6, there have been only two security updates for IIS ...
Get Windows Server® 2008 Security Resource Kit now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
