Tuesday, 26 November 2013

P3 - Explain the security risks and protection mechanisms involved in website performance

Explain the security risks and protection mechanisms involved in website performance 


Hacking
Hacking is a broad term to encompass malicious users who intend to exploit weaknesses in a computer and its internet software. They intend to force their way into the computer and discover personal information on the owner of the computer, and use it for identity theft or other malicious intent.
Hackers will use the information that they gain for malicious uses, often identity theft or fraud. This makes it vitally important that users and companies find good protection and anti-virus software for their systems to protect them from hackers.

Phishing
Phishing is a term used to describe the act of taking a secure website, such as the login page for an online banking account, and copying it in its entirety and uploading it to another website with an almost identical address. The website will tell the user to login, and once they have logged in with their username and password, the website will show a page informing the user that the website is down for maintenance. Meanwhile, the user’s information is being sent to malicious users in another country, who will use the information to sign into their online banking.

Identity Theft
Identity theft is when malicious users use software, such as Trojans, to gain personal information on people and use it to steal their identities and use them for personal gain. They will gain their identity through passports or other ways of confirming a person’s identity, and using them they will open bank accounts in their name, withdraw money from their bank accounts and commit fraud.
Identity theft can cause users and companies to lose a lot of money, which makes it important that they protect themselves from these malicious users. 

Viruses
Viruses are malicious programs and software that has been installed onto a system. The software is intended to steal data and information on the user, and the stolen information will be used to steal details, usually on bank accounts. Some viruses are keyloggers, which is a program that will log your keystrokes when using the keyboard. This usually enables the owner of the malicious software to determine your password from the keystrokes you make while using the computer.

Security Protection
Users and companies can protect themselves from these malicious users in several ways. Firewalls will protect your computer from malicious users attempting to force access via viruses and keyloggers. 

Strong passwords are also key to security protection, as a strong password is much harder to crack and will reduce the amount of people that are able to break into your system. A strong password should contain, both letters and numbers, upper and lower case letters, over eight characters long and should contain symbols such as %, + and -. 

Secure Socket Layers is an internet protocol that provides a secure connection to another user via communication over the internet. This is done by encryption and will verify who each user is and the user of the computer, preventing malicious users from gaining entry to the system. 


Principles of the Data Protection Act
The data protection act consists of eight principles that companies are required by law to comply with and follow. The data protection act states that companies must:

1. Data must be processed fairly and lawfully.

2. Data must be obtained for specified and lawful purposes.
3. Data must be adequate, relevant and not excessive.
4. Data must be accurate and up to date.
5. Data must not be kept any longer than necessary.
6. Data must be processed in accordance with the "data subject's" rights.
7. Data must be securely kept.
8. Data must not be transferred to any other country without adequate protection in situ.

These principles are in place to keep data safe and within in the laws for companies. If these principles aren't adhered to, then data can be unlawfully distributed to users with malicious intent. 

P2 - Explain the user side and server side factors that influence the performance of a website

Explain the user side and server side factors that influence the performance of a website

Factors on the User End


Download Speed

Download speed can effect the loading time and performance of a website in several ways on the user end of the system. If the user has a low download speed, then the webpage will take longer to load and complete tasks that the user is asking it to do. This is a user side factor that will influence the performance of the website that the user is trying to access.

Slow download speeds will create a long waiting time in loading the website, and so performing tasks such as loading videos, clicking on hyper-links and navigating through the websites pages will take a long time and can become frustrating for the user.


Computer Specification

The users computer specification may be a factor that influences the performance of a website that the user is trying to visit. There are several factors within computer specification that may have an influence on the performance of a website.

Browser-

The users web browser of choice may have an influence on the performance of the websites it is attempting to visit. Certain browsers perform better than others, and with Google Chrome being the most popular web browser of choice it is arguably the best suited web browser to use for internet browsing. Internet Explorer can have slow load times and is arguably behind Chrome in web browsing suitability.

Cache Memory-

Cache memory is temporary memory stored on your computer. A computer with a larger cache memory will be able to store more of the temporary things that websites need to run. Cookies, passwords and other scripts that websites generally perform when you access the website. A larger cache memory will allow for more of these to be stored, allowing for quicker access and quicker website performance.

Processor Speed-

The speed of the users processor will be a factor that influences the performance and speed of websites. A processor with a higher speed will allow the computer to perform tasks quicker, thus processing websites and all the scripts, cookies and other tasks that websites have on them faster. A higher processing speed will also allow videos and flash animations to load faster on webpages.

Factors on the Webpage End


Web Server Capacity

Websites are all stored on web servers, and each web server has a capacity for the amount of information it can send and receive in a certain amount of time. When accessing a website, the user's computer will send and receive information from the web servers, and with a higher web server capacity, the website will be able to send, process and receive this information quicker which will then lead to faster load times for the user and the webpages the user is trying to access.

Executions to be Performed

Each webpage must execute several actions before the webpage is completely loaded. These may be the loading of videos, animations, cookies or saved searches and tasks. The more actions that have to be performed before the webpage is fully loaded, then the longer it will take. This will influence the overall performance of the website, as it may take longer to load each page.

Number of Hits

The number of webpage hits can have a small effect on webpage performance. If many, many people are on the same webpage all at once, then it can overload the servers and slow down the website performance. Many web servers are prepared for this, and have large servers which can handle many hits all at once. 

File Types


Bitmap-

Bitmap images are saved so that the computer remembers each pixel type that has been saved. Common bitmap image types are .gif and .bmp, which generally have large file sizes and will slow down the loading time of a webpage. 

Vector-

Vector images are more compressed and have generally smaller file sizes when compared to Bitmap images. A well known vector image type is .pdf, which has a more compressed image and a small file size when compared to .jpg and .gif files. Having Vector images on your webpage will slow down the loading times, though less so than using Bitmap images. 

Wav-

Wav files are one of the most common audio files, and can often be found on webpages. Wav files are not compressed audio files, which can make them very large in size and dramatically slow down webpage loading times. While they are common, they often slow down webpages.

MP3-

MP3 files are compressed audio files, and so are generally a more popular and better alternative to Wav files. While the compressed files will generally have lower quality audio compared to the Wav file, the difference in quality is rarely noticeable. MP3 files will still slow down a webpage, but as they are compressed files it will be slowed down less so than using a Wav file.