Question

PLEASE TYPE ANSWER do not HAND WRITE or copy and paste.. Thank you very much.

Choose any Internet-related protocol or technology that commonly exists at the application layer and discuss its security concerns.

Why does this particular choice interest you? Choices include, but are not limited to email, JavaScript, Web servers, etc.

Answer 1

Application layer protocols

1. HTTP: HTTP Stands for hypertext transfer protocol. HTTP helps us to access resources from the internet by sending an HTTP request and receiving a response. This protocol is one of the important protocol of the application layer without this protocol we cannot send and receive a message on WWW (World Wide Web). HTPP works on port number 80. Port number is used to access a specific process from on client and server. So we can say HTTP is one of the important protocol and that's why I choose this protocol.

Security Concerns:

1. SQL injections: HTTP does not encrypt data so SQL injection can be used to read the message by hackers.

2. Authentication and message integrity: Authentication credentials and session identifiers are not protected at all times an attacker can hijack an active session and assume the identity of a user and can alter the message of the user.

3. Security Misconfiguration: A secure configuration must be defined and deployed for the application, frameworks, application server, web server, database server, and platform.

Due to the above security concerns the new version of HTTP comes, that is HTTPS (Hypertext transfer protocol secure).