Design and Implementation of Secure 3-Tier Web Application with Open Source Software
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Providing a secure 3-tier Web application has become a high priority for companies as e-businesses have increased the amount and the sensitivity of corporate information that can be accessed through the web. Web applications become more difficult to secure with this very increase in online traffic and transactions. This paper first reviews the 3-tier of web application, types of attacks that can threaten web application services and security principles. We then are designing and implementing a secure web application with open source software that able to mitigate the web application vulnerable to attack.
Abstract
Providing a secure 3-tier Web application has become a high priority for companies as e-businesses have increased the amount and the sensitivity of corporate information that can be accessed through the web. Web applications become more difficult to secure with this very increase in online traffic and transactions. This paper first reviews the 3-tier of web application, types of attacks that can threaten web application services and security principles. We then are designing and implementing a secure web application with open source software that able to mitigate the web application vulnerable to attack.
참고문헌 (28)
- Newfoundland and Labrador, "Enterprise Architecture Guidelines and Best Practices, Version 3", ~ (2009)
- Desmet, L, "A Generic Architecture for Web Applications to Support Threat Analysis of Infrastructure components", DistriNet Research Group, ~ (2005)
- "Small, medium firms cut security budgets"[URL]
- "Benefits of using the n-tired approach for web applications"[URL]
- Shamsaie, A, "Tierpeer: A three-tier framework for P2P", IJCSNS International Journal of Computer Science and Network Security, 7(2), pp.292~301 (2007)
- "Introduction to 3-Tier Architecture"[URL]
- "3-Tier Web Application Development"[URL]
- Zafar, M, F, "Network Security: A survey of Modern approaches", A Quarterly Scientific Journal of Pakistan, 11~31 (2008)
- Lawrence, E, "Technology of internet business", pp.243~273 (2002), John Wiley & Sons Australian
- "Man in the Middle Attack"[URL]
- Web Application Security Consortium, "Web Application Security Consortium: Threat Classification", 10~62 (2004)
- Pettit, S, "Anatomy of Web Application: Security Considerations", White Paper, Sanctum Inc, ~ (2001)
- Meier, J. D, "Web Application Security Fundamentals", Microsoft Corporation, ~ (2003)
- Taylor, A, "Information Security Management Principles", The British Computer Society, ~ (2008)
- Viega, J, "Building Secure Software - How to avoid security problems the right way" (2002), Addision-Wesley
- "Top 10 Web Service Security Requirements"[URL]
- Curphey, M, "Improving Web Application Security:Threats and Countermeasures Patterns & Practices", Microsoft Corporation, ~ (2003)
- Curphey, M, "A Guide to Building Secure Web Applications(OWASP Guide)", Creative Commons Attribution ShareAlike 3.0, ~ (2002)
- White Hat Security, "Web Application Security 101: Real-world examples, tools and techniques for securing websites", White Paper,White Hat Security,Inc, ~ (2005)
- "The Apache Tomcat"[URL]
- "MySQL Database Server 5.1.36"[URL]
- "Open SSL"[URL]
- "OpenVPN"[URL]
- "ModSecurity"[URL]
- "pfSense firewall"[URL]
- Cheliotis, G, "From open source to open content: Organization, licensing and decision processes in open cultural production", Decision Support Systems, 47(Issue 3), pp.229~244 (2009), Elsevier Ltd
- Forte, D, "SSL VPN and return on investment: A possible combination", Network Security, 2009(Issue 10), pp.17~19 (2009), Elsevier Ltd
- Bock, J, "Session-Cookies and SSL, study research project at the EISS", University of Karlsruhe, ~ (2008)