Owasp: Hanushini A/P Lachemykanden (MC 180606656)
Owasp: Hanushini A/P Lachemykanden (MC 180606656)
Part 02 HTTP
Part 03 HTTPS
Part 04 SSL
Introduction (OWASP)
The Open Web Application
Security Project (OWASP) is an
open community dedicated to
enabling organizations to develop,
purchase, and maintain
applications and APIs that can be
trusted.
How it works
Definition - Send the data
- Hypertext
Protocol
Transfer
H T unencrypted
- This means that any
computer that sees the
request can read the
data
is a highly connected
network and each request
passes through many
other computers before
reaching the web server
Impacts & Consequences
Definition - Only your computer and the web server can read
the data
- Hypertext Transfer - Protects the privacy and makes it harder for hackers
Protocol Secure to break the connection and steal personal
information such as credit card numbers, addresses,
passwords, etc.
HTTPS
- HTTP + SSL = HTTPS - User > encrypted
- HTTPS is a combination of HTTP with SSL/TLS. connection >
It means that HTTPS is basically HTTP secure https
connection which is delivering the data
secured using SSL/TLS
- All the computers in between cannot read it Conclusion
as it is encrypted
How it works
Definition
- Secure Socket Layer
How it works
- To make use of TCP/IP to provide a
- Its a certificate and the dominant reliable end-to-end secure service
security technology on the web
SSL
- TCP (Transmission Control Protocol) &
- SSL is a secure protocol that works IP (Internet Protocol) : platform to allow
on the top of HTTP to provide computers to share resources across a
security. network
Impacts & Consequences
Conclusion
- It provides
confidentiality, integrity,
authentication
THANK YOU