IT-21 Compliant Controlled Access to Internet Web Pages
Marcia S. Sonon · Calhoun: The Naval Postgraduate School Institutional Archive (Naval Postgraduate School) · 1998
Although numerous resources are available to achieve Internet presence by creating and publishing a web site, security and access control within the site are very limited. The Navy's support of the IT-2l initiative embracing the Microsoft Windows NT operating system (OS) provides solutions to not only restrict entry to the site, but also to control access to content on the web page. Work detailed in this thesis addresses the issue of security by exploring the Windows NT OS and activating its inherent security features to protect the overall system from intrusion and attacks from the internet. The web pages are published using Microsoft Internet Information Server 4.0 (IIS) and frontpage 98. Access is controlled by issuing certificates from the resident Microsoft certificate Server software package or remotely by VeriSign OnSite service. Windows NT and IIS permit a certificate to be mapped to a system account to further define the level of access assigned to each user down to the file level