Security and Performance Issues Mark J Cox UK Web Ltd.

Slides:



Advertisements
Similar presentations
The GridSite Toolbar Shiv Kaushal The University of Manchester All Hands Meeting 2006.
Advertisements

DT211/3 Internet Application Development Active Server Pages & IIS Web server.
HTTP HyperText Transfer Protocol. HTTP Uses TCP as its underlying transport protocol Uses port 80 Stateless protocol (i.e. HTTP Server maintains no information.
DT211/3 Internet Development Application Web Servers.
Servlets and a little bit of Web Services Russell Beale.
0-1 Team # Status Report (1 of 4) Client Contact –Point 1 –Point 2 Team Meetings –Point 1 –Point 2 Team Organization –Point 1 –Point 2 Team #: Team Name.
CGIWrap CGIWrap is a gateway program that allows general users to use CGI scripts and HTML forms without compromising the security of the http server.
INTERNET DATABASE Chapter 9. u Basics of Internet, Web, HTTP, HTML, URLs. u Advantages and disadvantages of Web as a database platform. u Approaches for.
0-1 Team # Status Report (1 of 4) Client Contact –Status Point 1 –Status Point 2 Team Meetings –Status Point 1 –Status Point 2 Team Organization –Description.
How the web works: HTTP and CGI explained
Creating your website Using Plain HTML. What is HTML? ► Web pages are authored in HyperText Markup Language (HTML) ► Plain text is marked up with tags,
2/9/2004 Web and HTTP February 9, /9/2004 Assignments Due – Reading and Warmup Work on Message of the Day.
 What is it ? What is it ?  URI,URN,URL URI,URN,URL  HTTP – methods HTTP – methods  HTTP Request Packets HTTP Request Packets  HTTP Request Headers.
CGI Programming: Part 1. What is CGI? CGI = Common Gateway Interface Provides a standardized way for web browsers to: –Call programs on a server. –Pass.
Java Server Programming Jeff Schmitt Towson University October 15, 1998.
Common Gateway Interface
Introducing ETIS n Express Term Internet Server is Express Term ‘on the Net’ n All the features of Express Term, plus –Complete control of your site look.
FALL 2005CSI 4118 – UNIVERSITY OF OTTAWA1 Part 4 Web technologies: HTTP, CGI, PHP,Java applets)
Comp2513 Forms and CGI Server Applications Daniel L. Silver, Ph.D.
COMP9321 Web Application Engineering Semester 2, 2015 Dr. Amin Beheshti Service Oriented Computing Group, CSE, UNSW Australia Week 1 1COMP9321, 15s2, Week.
Implementing ISA Server Publishing. Introduction What Are Web Publishing Rules? ISA Server uses Web publishing rules to make Web sites on protected networks.
Chapter 17 - Deploying Java Applications on the Web1 Chapter 17 Deploying Java Applications on the Web.
1 In the good old days... Years ago… the WWW was made up of (mostly) static documents. –Each URL corresponded to a single file stored on some hard disk.
1 © 2004, Cisco Systems, Inc. All rights reserved. CISCO CONFIDENTIAL Using Internet Explorer 7.0 to Access Cisco Unity 5.0(1) Web Interfaces Unity 5.0(1)
20-753: Fundamentals of Web Programming Copyright © 1999, Carnegie Mellon. All Rights Reserved. 1 Lecture 7: HTTP and CGI Fundamentals of Web Programming.
HTML ~ Web Design.
CGI Programming. What is it? CGI –Common Gateway Interface Standard way to pass information back to the Web Server –GET Query String –POST Standard Input.
SQL INJECTIONS Presented By: Eloy Viteri. What is SQL Injection An SQL injection attack is executed when a web page allows users to enter text into a.
A Little Bit About Cookies Fort Collins, CO Copyright © XTR Systems, LLC A Little Bit About Cookies Instructor: Joseph DiVerdi, Ph.D., M.B.A.
1-1 HTTP request message GET /somedir/page.html HTTP/1.1 Host: User-agent: Mozilla/4.0 Connection: close Accept-language:fr request.
RUBRIC IP1 Ruben Botero Web Design III. The different approaches to accessing data in a database through client-side scripting languages. – On the client.
Introduction to Dynamic Web Content Dr. Charles Severance
HTML, Third Edition--Illustrated Brief 1 HTML, Third Edition Illustrated Brief Unit A Creating an HTML Document.
Unicode Normalize Engine Submitted by: Jose Yallouz Shlomi Ben-Shabat Supervisor: Maxim Gurevich.
CSE 341, S. Tanimoto Lisp CGI - 1 Lisp CGI Programming for the Web Web servers can invoke Lisp to “intelligently” create web pages on the fly. We will.
CSU - DCE Webmaster I Scaling Issues - Fort Collins, CO Copyright © XTR Systems, LLC Web Site Scaling Issues (or Size Really Does Matter) Instructor:
Group 19 Juan O’Connell Justin Rand ECE 4112 Group 19 May 1, 2007 Georgia Institute of Technology College of Engineering School of Electrical and Computer.
ECMM6018 Enterprise Networking for Electronic Commerce Tutorial 7
The Basics of HTTP Jason Dean
UNIT-3 1.Web server software and Tools 1IT2031 UNIT-3.
Shell Interface Shell Interface Functions Data. Graphical Interface Graphical Interface Command-line Interface Command-line Interface Experiments Private.
Krerk Piromsopa. 1 Department of Computer Engineering. Chulalongkorn University. Web Application Generic Issues.
Web2.0 Secure Development Practice Bruce Xia
 Previous lessons have focused on client-side scripts  Programs embedded in the page’s HTML code  Can also execute scripts on the server  Server-side.
 There are device known as Server  Web Server / HTTP Server  Each computer has unique number known as IP Address  Domain Name.
Website Design:. Once you have created a website on your hard drive you need to get it up on to the Web. This is called "uploading“ or “publishing” or.
Introduction to HTML Simple facts yet crucial to beginning of study in fundamentals of web page design!
Example – SQL Injection MySQL & PHP code: // The next instruction prompts the user is to supply an ID $personID = getIDstringFromUser(); $sqlQuery = "SELECT.
Do Not Track: A Universal Third- Party Web Tracking Opt Out draft-mayer-do-not-track-00 Jonathan Mayer Arvind Narayanan Sid Stamm.
WEB1P webarch1 Web architecture Dr Jim Briggs. WEB1P webarch2 What is the web? Distributed system Client-server system Characteristics of clients and.
Session 11: Cookies, Sessions ans Security iNET Academy Open Source Web Development.
© Janice Regan, CMPT 128, Jan 2007 CMPT 371 Data Communications and Networking HTTP 0.
Web Hosting Info Guide.  It is service that allows user to post web pages to the internet.  It allows users to publish their own information resources.
ECMM6018 Enterprise Networking For Electronic Commerce Tutorial 1 Installing A Web Server.
Communication protocols 2. HTTP Hypertext Transfer Protocol, is the protocol of World Wide Web (www) Client web browser Web server Request files Respond.
Introduction to Information Systems SSD1: Introduction to Information Systems Unit 1. The World Wide Web Unit 2. Introduction to Java and Object- Oriented.
Status of new ALICE web pages
Web Development Web Servers.
Homework 4.
Some Common Terms The Internet is a network of computers spanning the globe. It is also called the World Wide Web. World Wide Web It is a collection of.
PHP / MySQL Introduction
MapServer In its most basic form, MapServer is a CGI program that sits inactive on your Web server. When a request is sent to MapServer, it uses.
14-мавзу. Cookie, сеанс, FTP и технологиялари
Web Site Development.
PHP and Forms.
Web Server Technology Unit 10 Website Design and Development.
COMP9321 Web Application Engineering Semester 2, 2016
Architecture of the web
Your computer is the client
COMP9321 Web Application Engineering Semester 1, 2017
Presentation transcript:

Security and Performance Issues Mark J Cox UK Web Ltd.

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

# Netscape HTTP Cookie File.netscape.comNETSCAPE_ID/c65ffb1e,c77ce

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

CGI Security Risks #!/bin/sh echo Content-type: text/html echo echo test.cgi echo You typed $QUERY_STRING test.cgi

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Hidden URL’s

q=download+128bit+ssl+encryption =netscape+competition

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Sun Ultra 1 running Solaris Apache Web Server 256Mb of RAM >500 concurrent clients 5 million hits per day

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Extranets Site 1 Site 2 Internet Confidential Information

Security and Performance Users Access Users Publish Protecting Pages Performance Issues Secure Servers

Stronghold Secure Server 128 bit Verisign approved Reference Sites Apache code base Source code £Educational Discount

Security and Performance Issues Mark J Cox UK Web Ltd.