MiniWeb Server

The MiniWeb Server is a compact web server based on the HTTP 1.1 standard. It supports the HEAD, GET, POST, and PUT access methods, the .htaccess file for access security, and SecureSocket Layer.

The MiniWeb Server is configured via one ASCII text file. The file permits customization ofabout 15 parameters, most of whose default values are adequate for almost all users. The two parameters that need to be customized by everyone are the IP address of the machine and the port number.

Concurrency is achieved in the server using POSIX threads. Each connection is handled by aseparate thread. The number of threads is customizable if required. The default is 20.

The Server is implemented on all platforms supported by VSTK, except those on which POSIXthreads are not available. Those platforms are HPUX-10, IRIX-6.2-MIPS, and OSF-ALPHA.

A debug mode is supported to a file or to the console for easy problem resolution.

While the Avatar and CIT systems can use remotely mounted file systems for their databases andexecution, this only allows for near real time operation in that execution is scheduled. While this is a good thing because it allows for an orderly progression and an event window can be kept secret,or even random, there is still a need for real time deployment in the event of a serious attack. Avatar, CIT and all of the other tools in the VSTK can be deployed in real time for centralizeddistribution using the MiniWeb tool. In fact, MiniWeb can be used to control products developed by companies other than CyberSoft. MiniWeb is a miniature, high security, stripped down webserver written from scratch.

MiniWeb has a very small memory foot print, requires minimal configuration and can coexist withall other web servers. MiniWeb can be bound to the system it is operating upon so that only a local operator can access it, or it can be bound to a specific list of systems or even opened. This list caninclude the centralized operations office. MiniWeb is intended as the server for the VSTK/P graphical user interface. It uses standard HTML 1.1 code and has the ability to execute both scriptand Perl CGI applications. Perl installation is not required; however, if Perl is not installed then Perl based CGI programs will not function. Using MiniWeb a centralized distribution point canforce the execution of Avatar and/or CIT using a simple script thereby providing real time functionality.

Using Avatar, CIT and MiniWeb together provides most of the functionality needed for centralizeddistribution in addition to their security role. In recap:

Centralized distribution, baseline management and automated repair via Avatar.
Centralized control and intelligence via CIT. (Closing the loop.)
Real time control using Miniweb.

As a final note to the MiniWeb program, I will once again point out that it can be used with anyhtml or cgi scripts. Developing or changing graphic user interfaces in html is very cost effective and significantly reduces the risk of code bugs.