5外文资料及译文.docx

5外文资料及译文.docx

《5外文资料及译文.docx》由会员分享，可在线阅读，更多相关《5外文资料及译文.docx（9页珍藏版）》请在冰豆网上搜索。

5外文资料及译文

I

河北科技师范学院

毕业论文（设计）外文资料及译文

题目：

基于WEB的高校学生档案信息管理系统设计与开发

学生姓名：

刘芳

指导教师：

耿清甲

系（院）别：

数学与信息科技学院

专业、班级：

网络工程0602班

完成时间：

2010年3月12日

河北科技师范学院教务处制

InternetInformationServices

InternetInformationServices（IIS）-formerlycalledInternetInformationServer-isawebserverapplicationandsetoffeatureextensionmodulescreatedbyMicrosoftforusewithMicrosoftWindows.Itistheworld'ssecondmostpopularwebserverintermsofoverallwebsitesbehindtheindustryleaderApacheHTTPServer.AsofMarch2010[update],itserved24.47%ofallwebsitesaccordingtoNetcraft.[1]TheprotocolssupportedinIIS7include:

FTP,FTPS,SMTP,NNTP,andHTTP/HTTPS.

Versions

∙IIS1.0,WindowsNT3.51availableasafreeadd-onIIS2.0,WindowsNT4.0

∙IIS3.0,WindowsNT4.0ServicePack3

∙IIS4.0,WindowsNT4.0OptionPack

∙IIS5.0,Windows2000

∙IIS5.1,WindowsXPProfessional,WindowsXPMediaCenterEdition

∙IIS6.0,WindowsServer2003andWindowsXPProfessionalx64Edition

∙IIS7.0,WindowsServer2008andWindowsVista（HomePremium,Business,Enterprise,UltimateEditions）

∙IIS7.5,WindowsServer2008R2andWindows7

IISisnotturnedonbydefaultwhenWindowsisinstalled,butitcanbeselectedfromthelistofoptionalfeatures.ItisavailableinalleditionsofWindowsVistaandWindows7,includingHomeBasic,butsomefeaturesarenotsupportedonclientversionsofWindows.

History

ThefirstMicrosoftwebserverwasaresearchprojectatEuropeanMicrosoftWindowsNTAcademicCentre（EMWAC）,partoftheUniversityofEdinburghinScotland,andwasdistributedasfreeware.[2]HoweversincetheEMWACserverwasunabletoscalesufficientlytohandlethevolumeoftrafficgoingto,Microsoftwasforcedtodevelopitsownwebserver,IIS.[3]

IISwasinitiallyreleasedasasetofweb-basedservicesforWindowsNT3.51.IIS2.0followed,addingsupportfortheWindowsNT4.0operatingsystem;andIIS3.0introducedtheActiveServerPagesdynamicscriptingenvironment.[4]

IIS4.0droppedsupportfortheGopherprotocolandwasreleasedaspartofan"OptionPack"forWindowsNT4.0.

ThecurrentshippingversionofIISis7.5forWindows7andWindowsServer2008R2,7.0forWindowsVistaandWindowsServer2008,6.0forWindowsServer2003andWindowsXPProfessionalx64Edition,andIIS5.1forWindowsXPProfessional.

WindowsXPhasarestrictedversionofIIS5.1thatsupportsonly10simultaneousconnectionsandasinglewebsite.[5]

IIS7.0onVistadoesnotlimitthenumberofallowedconnectionsasIISonXPdid,butlimitsconcurrentrequeststo10（WindowsVistaUltimate,Business,andEnterpriseEditions）or3（VistaHomePremium）.Additionalrequestsarequeued,whichhampersperformance,buttheyarenotrejectedaswithXP.

IIS6.0addedsupportforIPv6.AFastCGImoduleisalsoavailableforIIS5.1,IIS6.0[6]andIIS7.[7]

IIS7.0（WindowsVista/2008）hasbetterperformancethanIIS5.1（WindowsXP）becauseitreliesontheHTTP.SYSkerneldriver.

Security

Thisarticlemayneedtobeupdated.Pleaseupdatethisarticletoreflectrecenteventsornewlyavailableinformation,andremovethistemplatewhenfinished.Pleaseseethetalkpageformoreinformation.

EarlierversionsofIISwerehitwithanumberofvulnerabilities,chiefamongthemCA-2001-19whichledtotheinfamousCodeRedworm;however,bothversions6.0and7.0currentlyhavenoreportedissueswiththisspecificvulnerability.[8][9]InIIS6.0Microsoftoptedtochangethebehaviourofpre-installedISAPIhandlers,[10]manyofwhichwereculpritsinthevulnerabilitiesof4.0and5.0,thusreducingtheattacksurfaceofIIS.Inaddition,IIS6.0addedafeaturecalled"WebServiceExtensions"thatpreventsIISfromlaunchinganyprogramwithoutexplicitpermissionbyanadministrator.

Inthecurrentrelease,IIS7,thecomponentsareprovidedasmodulessothatonlytherequiredcomponentshavetobeinstalled,thusfurtherreducingtheattacksurface.Inaddition,securityfeaturesareaddedsuchasRequestFiltering,whichrejectssuspiciousURLsbasedonauser-definedruleset.

BydefaultIIS5.1，adefaultWindowsaccountwith'superuser'rights.Under6.0allrequesthandlingprocesseshavebeenbroughtunderaNetworkServicesaccountwithsignificantlyfewerprivilegessothatshouldtherebeavulnerbilityinafeatureorincustomcodeitwon'tnecessarilycompromisetheentiresystemgiventhesandboxedenvironmenttheseworkerprocessesrunin.IIS6.0alsocontainedanewkernelHTTPstack（http.sys）withastricterHTTPrequestparserandresponsecacheforbothstaticanddynamiccontent.

Therearevariousbuilt-insecurityfeaturesfromMicrosoft.Manycompaniesofferthird-partysecuritytoolsandfeatures,alsoknownas"WebAppFirewalls,orWebApplicationFirewalls."Theadvantageofsuchtoolsisthattheyoffermuchmorecomprehensiveelements（suchaseasy-to-useGUI,etc.）thataidinprotectinganIISinstallationwithanadditionallayerofprotectionatahigherlevel.Thoughnosecuritysystemisevercomplete,mostadminschoosetorunanapplication-layerfirewallandanIntrusionPreventionSystem（IPS）.

IISFeatures

IIS7isbuiltonamodulararchitecture.Modules,alsocalledextensions,canbeaddedorremovedindividuallysothatonlymodulesrequiredforspecificfunctionalityhavetobeinstalled.IIS7includesnativemodulesaspartofthefullinstallation.Thesemodulesareindividualfeaturesthattheserverusestoprocessrequestsandincludethefollowing:

∙HTTPmodules-UsedtoperformtasksspecifictoHTTPintherequest-processingpipeline,suchasrespondingtoinformationandinquiriessentinclientheaders,returningHTTPerrors,andredirectingrequests.

∙Securitymodules-Usedtoperformtasksrelatedtosecurityintherequest-processingpipeline,suchasspecifyingauthenticationschemes,performingURLauthorization,andfilteringrequests.

∙Contentmodules-Usedtoperformtasksrelatedtocontentintherequest-processingpipeline,suchasprocessingrequestsforstaticfiles,returningadefaultpagewhenaclientdoesnotspecifyaresourceinarequest,andlistingthecontentsofadirectory.

∙Compressionmodules-Usedtoperformtasksrelatedtocompressionintherequest-processingpipeline,suchascompressingresponses,applyingGzipcompressiontransfercodingtoresponses,andperformingpre-compressionofstaticcontent.

∙Cachingmodules-Usedtoperformtasksrelatedtocachingintherequest-processingpipeline,suchasstoringprocessedinformationinmemoryontheserverandusingcachedcontentinsubsequentrequestsforthesameresource.

∙LoggingandDiagnosticsmodules-Usedtoperformtasksrelatedtologginganddiagnosticsintherequest-processingpipeline,suchaspassinginformationandprocessingstatustoHTTP.sysforlogging,reportingevents,andtrackingrequestscurrentlyexecutinginworkerprocesses.

SecurityFeatures

IIS5.0andhighersupportthefollowingauthenticationmechanisms:

∙Basicaccessauthentication

∙Digestaccessauthentication

∙IntegratedWindowsAuthentication

∙.NETPassportAuthentication（notsupportedinWindowsServer2008andabove）

IIS7.5includesthefollowingadditionalsecurityfeatures:

∙ClientCertificateMapping

∙IPSecurity

∙RequestFiltering

∙URLAuthorization

AuthenticationchangedslightlybetweenIIS6andIIS7,mostnotablyinthattheanonymoususerwhichwasnamed"IUSR_{machinename}"isabuilt-inaccountinVistaandfutureoperatingsystemsandnamed"IUSR".Notably,inIIS7,eachauthenticationmechanismisisolatedintoitsownmoduleandcanbeinstalledoruninstalled.

IISExtensions

IISreleasesnewfeaturemodulesbetweenmajorversionreleasestoaddnewfunctionality.ThefollowingextensionsareavailableforIIS7:

∙FTPPublishingService-LetsWebcontentcreatorspublishcontentsecurelytoIIS7WebserverswithSSL-basedauthenticationanddatatransfer.

∙AdministrationPack-AddsadministrationUIsupportformanagementfeaturesinIIS7,includingASP.NETauthorization,customerrors,FastCGIconfiguration,andrequestfiltering.

∙ApplicationRequestRouting-Providesaproxy-basedroutingmodulethatforwardsHTTPrequeststocontentserversbasedonHTTPheaders,servervariables,andloadbalancealgorithms.

∙DatabaseManager-AllowseasymanagementoflocalandremotedatabasesfromwithinIISManager.

∙MediaServices-IntegratesamediadeliveryplatformwithIIStomanageandadministerdeliveryofrichmediaandotherWebcontent.

∙URLRewriteModule-Providesarule-basedrewritingmechanismforchangingrequestURLsbeforetheyareprocessedbytheWebserver.

∙WebDAV-LetsWebauthorspublishcontentsecurelytoIIS7Webservers,andletsWebadministratorsandhostersmanageWebDAVsettingsusingIIS7managementandconfigurationtools.

∙WebDeploymentTool-SynchronizesIIS6.0andIIS7servers,migratesanIIS6.0servertoIIS7,anddeploysWebapplicationstoanIIS7server.

Seealso

∙ApacheHTTPServer

∙PWS

∙ListofFTPserversoftware

∙Listofmailservers

∙Comparisonofwebservers

∙Metabase

∙ASP.NET

∙WindowsCommunicationFoundation

∙LogParser-SQL-likequeryingofvariouslogformats.

References

1.^"NetcraftWebServerSurvey,March2010".Retrieved2010-03-19. 

2.^"WindowsNTInternetServers".Microsoft.July10,2002.Retrieved2008-05-26. 

3.^DaveKramer（December24,1999）."ABriefHistoryofMicrosoftontheWeb".Microsoft. 

4.^"MicrosoftASP.NET2.