InternetPrivacy-AtHomeandAtWorkATutorial.ppt

Internet Privacy - At Home and At Work: A Tutorial Presented by Dr. Robert J. Boncella Professor of CIS CIS Department and School of Business Washburn University Topeka, Kansas Internet Privacy - At Home Client/Server Computing Web Basics Uniform Resource Identifier URI Uniform Resource Locator URL Uniform Resource Name URN URL/URN Syntax protocol://host[:port]/url-path protocol://username:password@host/url-path Protocol Examples http://host[:port]/path/resource_name[#section][?query_string] ftp://username:password@host[:port]/path Examples :80/cgi-bin/WebQuery?searchText servlets ftp://anonymous@/ HTTP Protocol Client sends a request to a server Server sends a response to client Connectionless Client: Opens connection to server Sends request Server Responds to request Closes connection Stateless Client/Server have no memory of prior connections Server cannot distinguish one client request from another client HTTP Protocol Request Line Syntax Status Line Format in Response Message Header Format HTTP and Privacy Privacy Threats Server Log Files Proxy Log Files Referer Header Cookies Web Bugs Privacy Assurance Anonymizing Proxies Cookie Cutters Server Log Files The name IP address of the client computer The time of the request The URL that was requested The time it took to send the resource If HTTP authentication used; the username of the user of the client will recorded Any errors that occurred The referer link The kind of web browser that was used Cookies Used to solve the “Statelessness” of the HTTP Protocol Used to store and retrieve user-specific information on the web When an HTTP server responds to a request it may send additional information that is stored by the client - “state information” When client makes a request to this server the client will return the “cookie” that contains its state information State information may be a client ID that can be used as an index to a client data record on the server HTTP Header Syntax for a Cookie Attribute