Algorithm for Web Server Security

Abstract

The Web application layer is the number one target for malicious online attacks. Millions of Web sites regulate access to highly sensitive information including social security numbers, credit card numbers, names, addresses, birthdates, intellectual property, financial records, trade secrets, medical data, and more. These data must be rigorously protected from intruders. To reduce the risk of losses, brand damage, theft of intellectual property, legal liability, and fines, enterprises need timely information about how Web sites are penetrated and how they can be defended. This article presents an algorithm to generate the security report. The proposed algorithm uses the experimental data of 69 different Indian research/educational Web sites and the generated security report took place after checking all the possible prospective of obtained experimental attributes dataset. This article also presents the changes in the security settings of the Indian Web sites within 3 years, on the bases of open port’s study of 3 years experimental result. Based on port scanning, preventive security measures can be taken by organizations as a policy matter.

Keywords:

• Port scanning
• Web security
• Web server

Additional information

Notes on contributors

Brijendra Singh

Dr. Brijendra Singh at present working as Professor of Computer Science at University of Lucknow. Prior to Join University of Lucknow as Professor of Computer Science, He worked as Professor and Head Department of Information Technology, at Vellore Institute of Technology, Vellore. Prof. Singh worked as HOD Department of computer Science, University of Lucknow from 2007 to 2009. He has received his D.Phil degree in the field of Computer Science from J.K.Institute of applied Physis and Technology, University of Allahabad, Allahabad. He has taught and researched at various reputed institutions including IIT Kharagpur, Vikram Sarabhai Space Centre (VSSC) Trivandrum and National Institute of Technology Kurukshetra, Prior to Join University of Lucknow as Professor of Computer Science. He worked as Professor and Head Department of Information Technology, at Vellore Institute of Technology, Vellore. Prof Singh worked as HOD Department of computer Science, University of Lucknow from 2007 to 2009. At present Prof. Singh is working as Professor of Computer Science at University of Lucknow.

Prof. Singh is author of three books including “Data Communication and Network ” and “Network Security and Management” published by PHI Delhi. Besides He has published fifty research papers related to Computer Science and Reliability.

Prof. Singh is a recipient of the Gowari Memorial Awards in 1995 from Institution of Electronics and Telecommunications Engineers, Delhi. He has received the honor of International Man of the Year (1999-2000) from International Biographical Centre, Cambridge, England.

Prof. Singh has organized a number of conferences, Seminar and workshops in the areas of Network Security and Management, Software Quality and Reliability. He has also chaired several technical sessions and delivered invited talks in national and international conferences. E-mail: [email protected]

Pooja Agarwal

Pooja Agarwal has received her MCA and M.Phil degree and has interest in Network security. She has also published five research papers in conferences. She has worked as Subject Expert/Visiting faculty, Department of Computer Science, University of Lucknow, Lucknow. Currently working as System Analyst in Dr. Shakuntala Misra Rehabilitation University, Mohaan Road, Lucknow. E-mail: [email protected], [email protected]