Collection of web pages Identified by domain name Published on web server Accessible via IP (internet or LAN) Website - Definition
Personal Commercial Government Non-profit Organization Website - Utilities
Website - Types
Web Server - Definition System computer (both software and hardware) Can processes request via HTTP Distribute information on the world wide web
Web Server - Function Store, process, and deliver information (web pages) to clients using HTTP (Hypertext Transfer Protocol)
Clients use web browser to request data from web server. Sometimes they use web crawler Web Server - Clients
Web Server - Vendor
Web Server - Security
Threat on the client side Threat on the server side Network threat Web Server - Common Security Threat
Threat – DoS & DDoS Uses client/server architecture to direct attacks Targeting availability of system Countermeasure: filtering incoming and outgoing packets
Type of Dos attack Targeting reliability of system This attack occurs when applications write content that exceeds buffer size Example: email with large attachment Threat – Buffer Overflow Attack
Code injection technique to attack database Targeting integrity and confidentiality of system Usually using web input Example: vulnerability on web login form Threat – SQL Injection
Free and open source cross platform web server software As 1 June 2017 92.26% ran on Linux distributions Initial release 1995 (22 years ago) Apache
PHP PHP:Hypertext Processor Server side scripting language for web development Open source First appeared 1995 (22 years ago) Designed by Rasmus Lerdorf
PHP <!DOCTYPE html> <html> <body> <? php echo "My first PHP script!"; ?> </body> </html>
Structured Query Language Standard language for storing, manipulating, and retrieving data in database First appeared 1974 (43 years ago) Initial release 1986 SQL