请问谁知道哪里有ASP安全方面的文章

ACL控制

主要

C盘(sys)
admin +x +r +w +e
usr +r
IIS_WPG +r
system + x +e +w +r
目录
windows admin,system
program admin system
program\common admin system iis_wpg usr

D盘 (web.sql)
admin +x +r +w +e
usr +r
iis_wpg +r (非继承)
目录
sqldata admin +r +x +e +w
webroot admin,iis_wpg,usr

E盘(data backup)
admin only

cmd net acl控制 admin only NO system,usr,iis_wpg

服务器密码设置情况
Administrator
Sa
Pcanywhere
端口修改
Sql
RmoteDesktop
Pcanywhere

具体执行办法

封ASP木马

cacls %systemroot%\system32\scrrun.dll /e /d guests
cacls %systemroot%\system32\shell32.dll /e /d guests

regsvr32 scrrun.dll /u /s
regsvr32 shell32.dll /u /s

防堵DDOS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"SynAttackProtect"