How to Write Security scripts

Example

Document No.	0.0.0.1	Creation date
Document version	0.0.0.1	Revision Date
Released		Valid tive date
Endorsement status

 

 

1. Deploy the server guard environment in the 1.1 Environment

(1) the inventory of data under the "/code/DB" Object of the operation, creating tables, letters, storage processes, and initializing data.

(2) encrypt and decrypt the component under "/code/tools/CryptoAPI" on the server.

(3) Enterprise Library release L 2007. MSI component under security documents/code/tools.

1.2 experiences

 

Zookeeper	Description
SQL Server DB	Window 2008 + SQL Server 2008 Enterprise Edition
PDF soft	Adobe Reader 9.0 (or Adobe Acrobat 9 Pro) or later

2. You must install IIS 2.1 Security Software

1.3.1 select "rolues" and click "add roles"

1.3.2 select "Web Server (IIS)" Check Authorizer, and then click "Next" [next] "Press"

 

1.3.3 click "[next]" and press "Next"

 

1.3.4 click "[next]" and press "Next"

 

1.3.5 click "[install]" and then press "renew ".

 

1.3.6 click "[close]" and press "close"

 

 

2.2 Enterprise Library Security

1.1.1 click "[next]" and press "Next"

 

2.1.2 select the winner and click "[next]".

 

2.1.3 click "[next]"

 

2.1.4 select the router interface of the program security, and click "[next]".

 

 

2.1.5 then click "[install]"

 

2.1.6 click "[finish]" to complete the security protection.

 

 

2.3 of data centers

Run the SQL statement in the database file inventory in sqlserver to create the object of the data used by the system. Some data tables need to manually configure the relevant data, after the operation is successful, the UW Data Warehouse and the related table will be created, and the process objects will be stored in the function.

3 uwweb program security process 3.1 uwweb program security process

Uwweb is an ASP. NET application. The deployment steps are as follows:

(1) Open the Internet information servers (IIS) Manager Management Program on the server. The list of servers on the left of the main region is as follows:

 

(2) Select "sites" site and click "add web site" in the menu, as shown in the following figure.

 

 

(3) Select "sites" site and click "add web site" in the menu, as shown in the following figure.

 

 

(4) Fill in the highlighted box with the specific configuration metrics, site name, program pool, physical path, IP address, and port number, if the website configuration is correct, click OK and the website will be immediately refreshed.

(5) Add a website to view shared files. Click "add virtual directory…" on the uwweb website and click "right ...".

 

(6) In the displayed settings window, click "Register category name" and "share category address", and then click "Connect ...", In the displayed window, select "specific user", select "sort", and click "set ...".

 

 

(7) log on to the shared file server with the "user name", "password", and "Confirm Password", and click "OK" to complete configuration.

 

(8) Click Upload "uwweb", and then click upload "content view" on the right-hand side of the page to switch to "content view ".

 

(9) You can select login. aspx, and then right-click "Browse". You can view the website logon page to indicate that the configuration is successful.

 

 

 

In addition, for the Asp.net web site, to test all other factors, some additional settings may need to be made. The configuration items are as follows, you can configure different functions. The dynamic configuration allows you to view the IIS configuration information or the administrator of the internal server.

 

 

 

3.2 program configuration description

On the IIS server, create a route entry to direct the route entry to the target version. the version of the net framework must be set to 4.0 or above, and other targets (IP address, problem rules, and so on) should be set ...), Configure the web. configure the metric points and DB connector strings for each Metric function in config (the specific configuration is provided below) and set log4neg. after the daily routine in config is configured, the web program is deployed to IIS. If the deployment is successful, you can renew the webpage, for example, http: // localhost/login. aspx

To deploy a uwweb program, you need to configure the relevant website of Web. config:

DbconnReset point: Set the access string of the database. The login password in the string must be encrypted.

PdfpathTIPS: PDF-based IIS Installation

LdapswithUsage: whether to enable the ladp certificate function. The value true indicates yes, and the value false indicates no.

Ldap_ipLocation: URL address of the LDAP server

 

3.3 log configuration description

The program framework uses log4net to process the logs. Every history in uwweb contains a log4net. config file, which has three "appender" points, with "rollingfile" in different places ", "debugfile" and "errorfile" have a configuration location, whose name is "File ", the value of the specific vertex is the storage path of the type daily worker, which can be modified based on actual conditions. The routing rules are as follows: "program function category + day category _", for example,

<Param name = "file" value = "C: // uwweb // weblog // webinfo _"/>

Indicates that the daily quota of the info type of the web program is stored in the category of C: // uwweb // weblog.