I have an IIS Web server on my DMZ with two IP addresses assigned to one NIC. I have set the bindings in IIS to run each of the two sites on separate IP addresses. The problem is both sites ...

A free download, the Web Application Configuration Analyzer scans IIS servers, hosted applications, and SQL Server instances for common security issues and misconfigurations.

Open Web Application Security Project, one of the most respected organizations trying to increase Web server security, continues to report nearly the same top 10 Web site security flaws that have ...

Although there has been a new IIS vulnerability disclosed in recent weeks, the attacks are only making use of poor site and database maintenance practices - using SQL injection to exploit sites.