1. What makes web pages look like web pages 1-19-2012 LS 560 Spring 2012, section 901

2. Article review (Apache/IIS) Technical, Research, Fluff or any combination? Timeliness? Terminology used What is the main point? How does this tie back to the class?

3. Technical, research, fluff? Technical Some fluff…on Microsoft side

4. Timeliness Apache 1999 Microsoft 2003 to 2006

5. Terminology (part 1) http Cgi Protocol Component Module URI MIME Handlers Log NCSA Server Resource Allocation Resource Pool extensibility

6. Terminology Part 2 Secure Deployment topology Internal/external firewall Remote application server Infrastructure security restrictions Web farm Trust level Microsoft DTC DCOM.NET remoting RPC Dynamic port alloction TCP/IP stack Forms Auth vs. Protected view state Secure Socket Layers, Encryption, clear text Trust Level Authentication-SQL, process, service, anonymous, user, db connection strings Authorization-defense, gatekeepers, role-based, privilege separation Session management Cryptography-algorithm, encryption key Parameter manipulation Exception

7. What is the main point? User request http: port 80https: port 443TCP: other portRDP: dynamic port range Web Server And Or/App Server App Server Apache IIS Apache Tomcat Php, html, perl/python CGI Html, asp, compiled CGI EXE Java, ruby, groovy, grails COM+,.Net Authenticated? Authorized? Authenticated? Authorized? External firewall Orange: internal firewalls

8. How does this tie back to the class? Technology Infrastructure