Urlscan is a powerful security tool that works in conjunction with the IIS Lockdown Tool to give IIS Web site administrators the ability to turn off unneeded features and restrict the kind of HTTP requests that the server will process.

Microsoft Consulting Services web server best practices.

This article describes steps one may take to create a test certificate that allows one to enable SSL on IIS under Windows XP Professional.

Software works by turning off unnecessary features thereby reducing attack surface available to attackers.