What makes web pages look like web pages

1-19-2012LS 560 Spring 2012, section 901

Article review (Apache/IIS)

• Technical, Research, Fluff or any combination?• Timeliness?• Terminology used• What is the main point?• How does this tie back to the class?

Technical, research, fluff?

• Technical• Some fluff…on Microsoft side

Timeliness

• Apache 1999• Microsoft 2003 to 2006

Terminology (part 1)• http• Cgi• Protocol• Component• Module• URI• MIME• Handlers• Log• NCSA Server• Resource Allocation• Resource Pool• extensibility

Terminology Part 2

• Secure• Deployment topology• Internal/external firewall• Remote application server• Infrastructure security

restrictions• Web farm• Trust level• Microsoft DTC• DCOM• .NET remoting

• RPC Dynamic port alloction• TCP/IP stack• Forms Auth vs. Protected view state• Secure Socket Layers, Encryption, clear

text• Trust Level• Authentication-SQL, process, service,

anonymous, user, db connection strings• Authorization-defense, gatekeepers,

role-based, privilege separation• Session management• Cryptography-algorithm, encryption key• Parameter manipulation• Exception

What is the main point?User request

http: port 80 https: port 443 TCP: other port RDP: dynamic port range

Web Server And Or/App Server App Server

Apache IIS IISApache Tomcat

Php, html, perl/python CGI

Html, asp, compiled CGI EXE

Java, ruby, groovy, grails

COM+, .Net

Authenticated?

Authorized?

Authenticated?

Authorized?

External firewall

Orange: internal firewalls

How does this tie back to the class?

• Technology Infrastructure