Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Securing Web Servers



Peter M. Mell, David F. Ferraiolo


This ITL Bulletin enumerates and describes techniques by which one can secure web servers. It categorizes the techniques into security levels to aid in their cost-effective application.
ITL Bulletin -


security, web server


Mell, P. and Ferraiolo, D. (1999), Securing Web Servers, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed April 19, 2024)
Created September 21, 1999, Updated February 19, 2017