Design and Implementation of Secure 3-Tier Web Application with Open Source Software

다국어 초록 (Multilingual Abstract)

Providing a secure 3-tier Web application has become a high priority for companies as e-businesses have increased the amount and the sensitivity of corporate information that can be accessed through the web. Web applications become more difficult to secure with this very increase in online traffic and transactions. This paper first reviews the 3-tier of web application, types of attacks that can threaten web application services and security principles. We then are designing and implementing a secure web application with open source software that able to mitigate the web application vulnerable to attack.

참고문헌 (Reference)

1 "pfSense firewall"

2 Meier, J. D, "Web Application Security Fundamentals"

3 Web Application Security Consortium, "Web Application Security Consortium: Threat Classification"

4 White Hat Security, "Web Application Security 101: Real-world examples, tools and techniques for securing websites"

5 Satani, G, "Top 10 Web Service Security Requirements"

6 Shamsaie, A, "Tierpeer: A three-tier framework for P2P" 7 (7): 292-301, 2007

7 "The Apache Tomcat"

8 Lawrence, E, "Technology of internet business" John Wiley & Sons Australian 243-273, 2002

9 "Small, medium firms cut security budgets"

10 Bock, J, "Session-Cookies and SSL, study research project at the EISS"

11 Forte, D, "SSL VPN and return on investment: A possible combination" Elsevier Ltd 2009 (2009): 17-19, 2009

12 "OpenVPN"

13 "Open SSL"

14 Zafar, M, F, "Network Security: A survey of Modern approaches"

15 "MySQL Database Server 5.1.36"

16 "ModSecurity"

17 "Man in the Middle Attack"

18 Mains, B, "Introduction to 3-Tier Architecture"

19 Taylor, A, "Information Security Management Principles"

20 Curphey, M, "Improving Web Application Security:Threats and Countermeasures Patterns & Practices"

21 Cheliotis, G, "From open source to open content: Organization, licensing and decision processes in open cultural production" Elsevier Ltd 47 (47): 229-244, 2009

22 Newfoundland and Labrador, "Enterprise Architecture Guidelines and Best Practices, Version 3"

23 Viega, J, "Building Secure Software - How to avoid security problems the right way" Addision-Wesley 2002

24 Petersen, J, "Benefits of using the n-tired approach for web applications"

25 Pettit, S, "Anatomy of Web Application: Security Considerations"

26 Curphey, M, "A Guide to Building Secure Web Applications(OWASP Guide)"

27 Desmet, L, "A Generic Architecture for Web Applications to Support Threat Analysis of Infrastructure components"

28 Thacker, N, "3-Tier Web Application Development"