QHS 5033-2010网站服务器安全配置规范.doc

——————————————————————————————————————————————— QHS 5033-2010网站服务器安全配置规范 Q/HS 中国海洋石油总公司企业标准 Q/HS 5033—2010 网站服务器安全配置规范 Security configuration specification for web server 2011－01－07发布 2011－04－01实施 中 国 海 洋 石 油 总 公 司 发 布 Q/HS 5033—2010 目 次 前言···································································································································································Ⅱ 1 范围·······························································································································································1 2 术语和定义···················································································································································1 3 IIS安全配置要求·········································································································································2 3.1 IIS基础配置··········································································································································2 3.2 IIS服务配置··········································································································································2 3.3 IIS访问控制配置···································································································································2 3.4 IIS MetaBase配置··································································································································3 3.5 其它安全配置········································································································································3 4 Apache安全配置要求··································································································································3 4.1 Apache基础配置······································································································