AirBox

Cloud Based Hosting Platform

Transcript

1. AirBox Vaishali Srivastav - 20114047 Apoorv Vikram Singh - 20114104 Nikhil Kumar Bharti - 20112005 Aruj Parajuli - 20114145
2. Indroduction Cloud Based Hosting Platform Encryption(AES-128 Bit) & Security Virtualization :- Docker Cloud Platform :- AWS, Heroku & DigitalOcean Version Control System :- GIT
3. Github Status
4. Technology Stack Web Framework:- Ruby on Rails Programming Language:- Ruby Database:- Postgres & Sqlite Web Development :- HTML, CSS, JS
5. What is Ruby on Rails? Web application development framework RubyGems MVC ORM(ActiveRecord) DRY(Don't Repeat Yourself) Convention over Configuration API, Routes & Portability Ruby
6. Virtualization
7. What Docker does?
8. Docker Hub
9. Amazon Web Service
11. Heroku Dashboard
12. Security Prevent SQL Injection Cross-Site Request Forgery and XSS Prevent Brute Forcing Prevent Privilege Escalation Reduce DDOS attack Prevent Clickjacking Prevent Session Hijacking and Session fixation Encryption in user fields Prevent Heartbleed
14. SQL Injection Is code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SELECT * FROM users WHERE name = '' OR '1'='1';
15. XSS XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user <b onmouseover=alert('You are hacked!')>click me!</b>
16. Brute-Force Brute-force attacks on accounts are trial and error attacks on the login credentials When password guessing, this method is very fast when used to check all short passwords, but for longer passwords other methods such as the dictionary attack are used
17. Privilege Escalation Act of exploiting a bug or design flaw on software application to gain elevated access to resources that are normally protected from an application or user. @project = Project.find(params[:id])
18. DDoS Attempt to make a machine or network resource unavailable to its intended users.
19. Clickjacking Malicious technique of tricking a Web user into clicking on something different from what the user perceives, thus potentially revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages
20. Heartbleed Vulnerability is classified as a buffer over- read, a situation where more data can be read than should be allowed Weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet
21. Session Hijacking Gain unauthorized access to information or services in a computer system
22. Bootstrap Save lots of time Responsive features Consistent design Easy to to use & Integration Compatible with browsers & smatphone Open Source Less & Sass Support
24. Sass DRY PRINCIPLE @import Variables Mixin @extend Reusable Color Scheming
25. Thank You!!!!