aback-stagepasswhateveryhackerwants-資料下載頁
2025-10-15 18:15本頁面
【導(dǎo)讀】Whatdoesthewebdo?Whatisitspurpose?orclayorevenmusic…onlydigital.Digital=easytocreate,change,copy,move.Easy=cheaptoproduce,cheaptodistribute.medium.Clarifysometerms. Somebasics…andissuesamessage:“GET/webconference”.(MessagesuseHTTP). HTTP.Client=puterthatwantsdata. Server=puterwiththedata. DNS=DomainNameService. IP=InterProtocol. HTML=Hyper-TextMarkupLanguage. What’stheaddressfor?Givemethedata. Encryption. Authentication. PKI. Certificate. HTTPS. fromweb-basedforms,etc.Microsoft’sanswertoCGI
【正文】 pting languages (JavaScript, VBScript) ? Plugins to handle nonHTML files ? MIME mappings to launch other applications ? Java Inter Clientside operations ? Browser amp。 other applications launched through the browser run in the context of the user, and will be constrained by the user’s permissions. ? Many clients work very similarly to web browsers, with scripting, plugins, MIME mappings, etc. The big difference is their builtin ability to send messages, allowing worm propagation. ? Biggest security concern is the user Web Client ? Dataseeking programs Inter What about XML? ? XML is just another language like HTML ? XML can be used to hold data, independently of presentation Data is transferred in XMLencoded format It is up to the client program to do something with the data. Maybe display it。 maybe process it。 maybe just store it. Put these technologies together and you get “Web Services” ? Allows for authoritative sources of data ? Basis for .NET and J2EE architectures. Lessons: ? Know your specific architecture. Web developers, web and DB admins, and work admins must all cooperate to secure the server side. ? Don’t tell people who don’t need to know. (“…what every hacker wants!”) ? Understand the contexts where programs will run. The servers/services, accounts used at each step, and target clients are all important. Questions?
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1