Date Published: July 2008
Author(s)
Karen Scarfone (NIST), Wayne Jansen (NIST), Miles Tracy (Federal Reserve Information Technology)
The purpose of this document is to assist organizations in understanding the fundamental activities performed as part of securing and maintaining the security of servers that provide services over network communications as a main function. The document discusses the need to secure servers and provides recommendations for selecting, implementing, and maintaining the necessary security controls.
The purpose of this document is to assist organizations in understanding the fundamental activities performed as part of securing and maintaining the security of servers that provide services over network communications as a main function. The document discusses the need to secure servers and...
See full abstract
The purpose of this document is to assist organizations in understanding the fundamental activities performed as part of securing and maintaining the security of servers that provide services over network communications as a main function. The document discusses the need to secure servers and provides recommendations for selecting, implementing, and maintaining the necessary security controls.
Hide full abstract
Keywords
Host security; server security
Control Families
Access Control; Audit and Accountability; Configuration Management; Identification and Authentication; Incident Response; Maintenance; Physical and Environmental Protection; Planning; System and Communications Protection; System and Information Integrity
