What makes web pages look like web pages LS 560 Spring 2012, section 901
Article review (Apache/IIS) Technical, Research, Fluff or any combination? Timeliness? Terminology used What is the main point? How does this tie back to the class?
Technical, research, fluff? Technical Some fluff…on Microsoft side
Timeliness Apache 1999 Microsoft 2003 to 2006
Terminology (part 1) http Cgi Protocol Component Module URI MIME Handlers Log NCSA Server Resource Allocation Resource Pool extensibility
Terminology Part 2 Secure Deployment topology Internal/external firewall Remote application server Infrastructure security restrictions Web farm Trust level Microsoft DTC DCOM.NET remoting RPC Dynamic port alloction TCP/IP stack Forms Auth vs. Protected view state Secure Socket Layers, Encryption, clear text Trust Level Authentication-SQL, process, service, anonymous, user, db connection strings Authorization-defense, gatekeepers, role-based, privilege separation Session management Cryptography-algorithm, encryption key Parameter manipulation Exception
What is the main point? User request http: port 80https: port 443TCP: other portRDP: dynamic port range Web Server And Or/App Server App Server Apache IIS Apache Tomcat Php, html, perl/python CGI Html, asp, compiled CGI EXE Java, ruby, groovy, grails COM+,.Net Authenticated? Authorized? Authenticated? Authorized? External firewall Orange: internal firewalls
How does this tie back to the class? Technology Infrastructure