P. 1
Web Server Stig v6r1

Web Server Stig v6r1

5.0

|Views: 2,312|Likes:
Published by ram5584

More info:

Published by: ram5584 on Jul 01, 2008
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

02/01/2013

pdf

text

original

The Internet is evolving from web sites that just deliver user interface pages to browsers to a
generation of programmable web sites that directly link organizations, applications, services, and
devices with one another. This linkage is intended to be system architecture independent. These
resulting “programmable web sites” are intended to become more than passively accessed sites;
they become user controlled web services. In this context, ASP.NET is a programming
framework (formerly known as Active Server Pages) that can enable this new vision for web
services. The SUN counterpart to ASP.NET is ONE, a predominantly Java environment.

The common language runtime provides built-in support for creating web services, using a
programming abstraction that is consistent and familiar to both ASP.NET Web Forms developers
and existing Visual Basic users. The resulting model is both scalable and extensible, and
embraces open Internet standards (HTTP, XML, Simple Object Access Protocol (SOAP)), Web
Service Description Language (WSDL) (see Section 5, Security of Other Web Related Services,
in this STIG) so that it can be accessed and consumed from any client or Internet-enabled device.

ASP.NET Web Forms pages are text files with an .aspx file name extension. They can be
deployed throughout an IIS virtual root directory tree. When a browser client requests .aspx
resources, the ASP.NET runtime parses and compiles the target file into a .NET Framework
class. This class can then be used to dynamically process incoming requests.

NOTE: The .aspx file is compiled only the first time it is accessed; the compiled type instance
is then reused across multiple requests.

Web Server STIG, V6R1

DISA Field Security Operations

11 December 2006

Developed by DISA for the DoD

UNCLASSIFIED

36

By taking an existing HTML file and changing its file name extension to .aspx (no modification
of code is required) an ASP.NET page is created. ASP.NET also provides support for web
services with the .asmx file. An .asmx file is a text file that is similar to an .aspx file. These files
can be part of an ASP.NET application that includes .aspx files.

Web Server STIG, V6R1

DISA Field Security Operations

11 December 2006

Developed by DISA for the DoD

UNCLASSIFIED

37

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->