1 of 14

SEC 260

Web and Applications Security

​

1- Introduction and Review

2 of 14

Agenda

  • Attendance
  • Introductions
  • Syllabus Review
  • Review
  • Class Activity
  • Wrap up

2

3 of 14

Introductions

#whoami

3

4 of 14

Introductions

#WhoAreYou?

  • First name
  • Where are you from?
  • Class rank (ex: freshman, super senior, etc.)
  • What brought you to Champlain College?
  • What are you hoping to gain from this course?

4

5 of 14

Introductions

Let’s review our Syllabus

5

6 of 14

Review

OSI Model

6

Application Layer

    • Servers, Clients, Computers
    • Application Logic – HTTP, SMTP, FTP

Transport Layer

    • Firewalls
    • End to End Delivery – TCP, UDP

Network Layer

    • Routers
    • Routing and Forwarding – IP, ICMP

Data Link Layer

    • Switches
    • Data Transit and Node Delivery – PPP, SDLC, HDLC

Physical Layer

    • Electro Magnetic Cables, Wireless Signals, Fiber Optic Cables
    • Signaling and Transfer - Ethernet

Presentation

Session

7 of 14

7

Review

IXP

IXP

ISP-1

ISP-2

ISP-3

Root DNS Server

.com DNS Server

ISP DNS Server

  1. Use MAC communication and get an IP address
  2. Obtain IP address of Server-1 through DNS
  3. Establish a TCP connection through 3-way handshake
  4. Obtain website through HTTP requests

8 of 14

8

Review

…

server1.com

…

SYN

SYN-ACK

ACK

TCP Connection Establishment

Client

Server

9 of 14

9

Review

…

server1.com

…

TCP Connection

GET <Resource>

TCP Connection

Asking for a web page, image, etc. resource

(HTTP)

10 of 14

10

Review

…

server1.com

…

TCP Connection

200 �HTML Page

TCP Connection

Obtaining a page, image, etc. resource as a HTTP response

Click Me

11 of 14

11

Review

HTTP Header of a Response

HTTP Body of a Response

Burp Proxy in Kali

12 of 14

12

Review

Client-Server Architecture

Peer-to-Peer Architecture

13 of 14

The Web …

Web 1.0

  • No user-to-server communication
  • Static websites
  • Content browsing only
  • Hyper-linking and bookmarking pages
  • Read-only Web

13

Web 2.0

  • Functions such as online documents, video streaming, etc.
  • Everything moves online; information and apps are stored on servers
  • Interactive advertising and pay-per-click
  • Read and write web
  • Cloud computing operations
  • Centralized data

Web 3.0

  • Intelligent, web-based functionalities and applications
  • Behavioral advertising and engagement
  • IoT
  • Read, Write, and Control Web (User Created Content)

​

14 of 14

Class Activity

​

Initial Access – Please report any problems you have with vcenter VMs.

​

14