Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Guide to General Server Security



Karen A. Scarfone, Wayne Jansen, Miles C. Tracy


The purpose of this document is to assist organizations in understanding the fundamental activities performed as part of securing and maintaining the security of servers that provide services over network communications as a main function. The document discusses the need to secure servers and provides recommendations for selecting, implementing, and maintaining the necessary security controls.
Special Publication (NIST SP) - 800-123
Report Number


host security, server security


Scarfone, K. , Jansen, W. and Tracy, M. (2008), Guide to General Server Security, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed July 12, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created July 25, 2008, Updated May 4, 2021