From National Institute of Standards and Technology | May 8, 2009
An organization's servers provide a wide variety of services to internal and
external users, and many servers also store or process sensitive information for the
organization. Some of the most common types of servers are Web, email, database,
infrastructure management, and file servers. Servers are frequently targeted by
attackers because of the value of their data and services. For example, a server might
contain personally identifiable information that could be used to perform identity
theft. This publication addresses the general security issues of typical servers.
The attached Zip file includes:
- Intro Page.doc
- Cover Sheet and Terms.pdf
- General Server Security Guide.pdf