Active Server Pages is a technology promoted by Microsoft which allows World-Wide Web developers to embed some Visual Basic code into their HTML documents. This code allows their World-Wide Web applications to be more interactive.

Active Server Pages is only available on Windows NT World-Wide Web servers, running Microsoft's IIS server software.

Since application logic (and an interpreter) is a part of the document retrieval process, these pages have had a history of Security problems, due to both bugs in the Microsoft interpreter and individual applications' logic.

Return to IT Security Concepts