Web Browser Security

Privacy vs Security

Security is is concerned with confidentiality, integrity and availability whereas Privacy is concerned with unintended disclosure of information.

CGI : Common Gateway Interface scripts

There is very tight integration between inbuilt web browsers and the OS. For this reason, very tight integration means more risk.

Use for more critical work equals more risk.
Convenience may introduce security risks but its productivity and popularity make up susceptible to risks.

Browser parasite : It is a program that changes some settings in the browser and can have many effects.

To operate server securely

Control server configuration.

Physically secure the system.
Minimize the risk to host system by removing unneeded services.
Back up the host system time to time to mitigate the risk.

Control users and access.

Least privilege is that no user should have more access or control than needed to perform the functionality.
Server should employ a session timeout and session tracking.
Server must include special access to update and maintain sensitive information.

Monitoring, auditing and logging.

Logging is the act of recording key information about the server and the service. Logs can be generated both by OS and application.
Greatest benefit of log is their use for monitoring the server.

Monitoring is the periodic review of log and other information.Monitoring is active sometimes real time process which identifies and reports security events that might be harmful to network and its components. Intrusion detection mechanism, penetration testing (Scanner, war dialer, protocol analyzer, social engineering) and violation processing (Clipping levels : Establishes baseline for violation activities that maybe normal user errors) are used to accomplish monitoring.
Logging and monitoring is the passive but effective way for intrusion detection.

Auditing is the process of verifying that Monitoring and Logging is done according to the plan and procedures. Typically done quarterly or semi-annually. Result of audit is usually change in logging and monitoring procedures. Standards related to auditing were provided by the Information Systems Audit and Control Association (ISACA). Determines how much monitoring is required.

Audit trails are log of events that provide history of occurrence in IT systems. It enables the enforcement of individual accountability by reconstructing events.

Audit associated with Information security system searches for :

Internal and external attempts to gain unauthorized access.
Pattern and history of access.
Unauthorized privilege granted to users.
Occurrence of intrusion and their resulting consequence.

	Created by Soul Blaze almost 8 years ago

Notes talk about basic Introduction to Penetration Testing.