Web security
Download as PPTX, PDF1 like299 views
The document discusses various topics related to web security including what it is, why it is important, common types of web attacks like SQL injection, cross-site scripting, password cracking, and phishing. It also discusses methods to provide security, such as using high security passwords, digital signatures, encryption/decryption, and biometric authentication. The conclusion states that as more security methods are available for websites, the future will be safer.
Web security
- 1. B.Rakesh Dr.Paul Raj Engineering college
- 2. WEB SECURITY
- 3. CONTENTS What is Web Security ? Why Web Security ? Types of Web Attacks How to Provide security Conclusion
- 4. What is web security ? Web security is a branch of Network security that deals specifically with security of websites, web applications and web services. .
- 5. Why Web Security ? To provide privacy and confidentiality to the web application ,website and web servers
- 6. Types of Web Attacks sql injecting Passcode cracking Session Hijacking Xss phishing
- 7. SQL INJECTION SQL injection (SQLi) refers to an injection attack where in an attacker can execute ma licious SQL statements that control a web application's database server
- 10. Cross site scripting attack Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a we b application to send malicious code, generally in the form of a browser side script, to a different end user.
- 11. Cross site scripting attack
- 12. Cross site scripting attack
- 13. Passcode cracking A password cracker is an application program tha t is used to identify an unknown or forgotten pas sword to a computer or network resources. It can also be used to help a human cracker obt ain unauthorized access to resources.
- 15. Passcode cracking • Brutus is one of the most popular remote online password cracking tools. ... •RainbowCrack. ... •Wfuzz. ... •John the Ripper. ... •THC Hydra. ... •Medusa. ... •OphCrack •Kali linux
- 16. Session Hijacking The most common method of session hijacking is called IP spoofing, when an attacker uses source-routed IP packets to insert commands into an active communic ation between two nodes on a network and disguising itself as one of the authenticated user s.
- 19. Phishing phishing is a term used to describe a malicious individual or group of individuals who scam users . They create duplicate website for Knowing the user id, passwords and Bank details of targeted peoples
- 23. How to Provide security
- 24. Security Methods High security passcodes Digital Signatures Encp & Dcpt Biometric authentication
- 25. High security passwords Some websites provides high security for your online transactions. The enable High Security feature helps define high security settings in your profile. By enabling this feature, for every transaction you make, you will receive a high security pa ssword on your mobile. You need to enter thi s password to complete the transaction.
- 26. High Security passcodes Examples
- 29. Digital Signatures What is Digital Signature? Hash value of a message when encrypted with the private k ey of a person is his digital sig nature on that e-Document
- 30. Why Digital signature To provide Authenticity, Integrity and Non-repudi ation to electronic documents To use the Internet as the safe and secure mediu m for e-Commerce and e-Governance Digital Signatures
- 31. Architecture
- 32. Digital signature •Government Online •Issuing forms and licences •Govt orders/treasury orders •Registration •Online file movement system •Public information records •E-voting
- 33. Encryption and Decryption Encryption The translation of data into a secret code. Encryptio n is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt
- 34. Decryption Decryption is the process of taking enco ded or encrypted text or other data and converting it back into text that you or t he computer can read and understand
- 35. Biometric Authentication Biometric security is a security mechanism used to authenticate and provide access to a facility or syst em based on the automatic and instant verification of web based applications
- 36. Why Biometric Security Traditional methods involving passwords and PIN numbers Biometrics highest level of security
- 37. Architecture
- 38. Conclusion In future the more security methods available for the websites, the betterand safer the future will be for all of us
- 39. Thanking You
- 40. Queries…..??