Web security

Web security

1. Securing the Web Server

   • Authentication Options
     • "HTTP 401 User unauthenticated" error
     • Customization of the user's login session
     • using SSL with client certificates
     • Third-party service providers
   • Web application configuration
     • User & group definitions
     • File permissions
     • Directory structures
   • Document access control
   • CGI Scripts
     • Execute under a single user identity
     • Security holes
     • First method to enhance web server abilities
   • JavaScript
     • Data validation improving user response

2. Web Server Architecture Extensions

   • Server-side includes
     • Command embedded into the HTML
   • PHP
   • Active Server Pages
   • Java Server Pages

3. Enterprise Web Server Architectures

   • Servlet & EJB containers, CORBA object wrappers, processess, etc

4. Securing Web Server hosts

   • Removing unnecessary tools
   • Minimize services
   • Protecting services, mail & DNS
   • verification tool
   • Tripwire or Veracity, internet security scanner

5. Connection security Web Server Placement

   • The Web server can reach the corporate Internet and application databases by using a few restricted protocols
   • Are targets of DDoS

6. Securing web clients

   • Active content
   • Scripting Languages
   • Browser Plug-Ins and Helper Applications
   • Browser Configuration

7. Web application security options

   • Policy
   • Techlonogy
   • Architecture
   • Configuration

8. Common Web security issues

   • Protecting the client
   • Protecting the connection
   • Preventing DoS
   • Protecting the server
   • Protecting the services hidden behind the web server
   • Security management