Repository navigation
Juniper's Notes
DARPA laid down the ARPANet was laid to have quick communications during the Cold War. CERN then created the WWW. Internet is the hardware Web is the software.
fill out
fill out
Client - Server System Client (Web Browser) sends the request Server sends the response
When Connecting to website a socket is created Socket Connects network to OS Sockets are like radio channels, they are always all around us we have to tune into it.
Web resource is the source of web content
- Text
- HTML
- Word
- Acrobat
- Based on identity
- Time of day
Uniform Resource Identifier URLs and URNs are URI Http://www.joes-hardware.com/specials/saw-blade.gif Protocol, sub-domain, domain, sub directory, resource http - Use Http protocol www.joes-hardware.com - Go to www.hoes-hardware.com Grand the resource called specials/saw-blade.gif
URLs tell exactly where a resource is located and how to access it
- Index.html
- /graphics/images.png
- /help/articles/how-do-i-setup-a-webpage.html
- https://www.mysite.com
- https://www.mysite.com/graphics/image.com
- https://www.mysite/help/articles/how-do-i-setup-a-webpage.html
TCP is so fun it has a six flags:
- SYN (Synchronize)
- ACK (Acknowledgment)
- FIN (Finish)
- RST (Reset)
- PSH (Push)
- URG (Urgent)
CA - entity that stores, signs, and issues digital certificates.
CIA Confidentiality Integrity Accessibility
File System Protections Set appropriate permissions on web content scripts and configuration files prevent file inclusion vulnerabilities
Data store protections prevent unauthorized access methods to databases and other backend data stores (eg prevent SQL injection)
Server Side script protections prevent script execution when not needed
Updates! OS as well as web server and backend applications
security specific technologies Security modules for web server (mod_security for apache) Os protection tools (eg SELinux) Intrusion Prevention systems denial of service protections web application firewall