Web Proxy Research Articles

Cyber attacks on radiological systems

The base of today’s radiological devices are computers and networks. The radiology department has a specific way of working and there are standards such as DICOM for medical image records, PACS for archiving and communication, and HL7 for information exchange in the medical system. As radiology becomes an economically interesting branch, it becomes a target for cyber-attacks. At the same time, radiological systems contain a lot of personal data that are valuable. The reasons for the attacks are often financial gain, political, ideological or personal. The start of an attack can be physical access to radiological devices or network access. DICOM files can be the trigger of an attack. We divide attacks into those that directly affect patients, those that have an indirect impact, and those that affect the infrastructure. Well known types are Denial-Of-Service, malware, cryptographic attacks and making changes of device settings. When defending against cyber-attacks, it is important to secure communication by e-mail and to keep software updated. The IT department of the radiology department should observe accounts of all users and check the authorizations. Networks must have access restrictions according to workplaces and purposes to prevent unwanted access. Web proxy protection restricts access to Internet sites that are potentially dangerous. The basics of the department’s network, such as servers, must be physically secured from access. DICOM files should be encrypted with the most secure algorithms available. In response to cyber-attacks, it is necessary to have standard procedures and such a system must always be on standby. Known attacks on radiological systems are Kwampiris, Petja/NotPetya, Ryuk, Wannacry, Conti group and BianLian.

ANALISIS EFISIENSI DAN KEAMANAN KONFIGURASI WEB PROXY DALAM MENGELOLA TRAFIK INTERNET DI LINGKUNGAN PENDIDIKAN

Internet use in educational settings is increasing, but can cause problems such as access to inappropriate content, the spread of malware, and misuse of bandwidth. Web proxies can be a solution for managing internet traffic efficiently and safely. This article analyzes the efficiency and security of web proxy configurations in managing internet traffic in educational environments. The efficiency of web proxy configuration is influenced by the type of web proxy, cache configuration, and bandwidth configuration. The security of a web proxy configuration is affected by authentication, content filtration, and software updates. Proper web proxy configuration can increase the efficiency and security of internet access for users in educational environments.

Applied Machine Learning Predictive Analytics to SQL Injection Attack Detection and Prevention

Abstract: The back-end database is pivotal to the storage of the massive size of big data Internet exchanges stemming from cloud-hosted web applications to Internet of Things (IoT) smart devices. Structured Query Language (SQL) Injection Attack (SQLIA) remains an intruder’s exploit of choice on vulnerable web applications to pilfer confidential data from the database with potentially damaging consequences. The existing solutions of mostly signature approaches were all before the recent challenges of big data mining and at such lacks the functionality and ability to cope with new signatures concealed in web requests. An alternative Machine Learning (ML) predictive analytics provides a functional and scalable mining to big data in detection and prevention of SQLIA. Unfortunately, lack of availability of readymade robust corpus or data set with patterns and historical data items to train a classifier are issues well known in SQLIA research. In this project, we explore the generation of data set containing extraction from known attack patterns including SQL tokens and symbols present at injection points. Also, as a test case, we build a web application that expects dictionary word list as vector variables to demonstrate massive quantities of learning data. The data set is pre-processed, labelled and feature hashing for supervised learning. The trained classifier to be deployed as a web service that is consumed in a custom dot NET application implementing a web proxy Application Programming Interface (API) to intercept and accurately predict SQLIA in web requests thereby preventing malicious web requests from reaching the protected back-end database. This project demonstrates a full proof of concept implementation of an ML predictive analytics and deployment of resultant web service that accurately predicts and prevents SQLIA with empirical evaluations presented in Confusion Matrix (CM) and Receiver Operating Curve (ROC).

Building a Flexible and Resource-Light Monitoring Platform for a WLCG-Tier2

Software development projects at Edinburgh identified a desire to build and manage our own monitoring platform. This better allows us to support the developing and varied physics and computing interests of our Experimental Particle Physics group. This production platform enables oversight of international experimental data management, local software development projects and active monitoring of lab facilities within our research group. Larger sites such as CERN have access to many resources to support generalpurpose centralised monitoring solutions such as MONIT. At a WLCG Tier2 we only have access to a fraction of these resources and manpower. Recycling nodes from grid storage and borrowed capacity from our Tier2 Hypervisors has enabled us to build a reliable monitoring infrastructure. This also contributes back to our Tier2 management improving our operational and security monitoring. Shared experiences from larger sites gave us a head-start in building our own service monitoring (FluentD) and multi-protocol (AMQP/STOMP/UDP datagram) messaging frameworks atop both our Elasticsearch and OpenSearch clusters. This has been built with minimal hardware and software complexity, maximising maintainability, and reducing manpower costs. A secondary design goal has also been the ability to migrate and upgrade individual components with minimal service interruption. To achieve this, we made heavy use of different layers of containerisation (Podman/Docker), virtualization and NGINX web proxies. This presentation details our experiences in developing this platform from scratch with a focus on minimal resource use. This includes lessons learnt in deploying and comparing both an Elasticsearch and OpenSearch clusters, as well as designing various levels of automation and resiliency for our monitoring framework. This has culminated in us effectively indexing, parsing and storing >200GB of logging and monitoring data per day.

Pemanfaatan layanan cloud computing dan docker container untuk meningkatkan kinerja aplikasi web

This research aims to analyze and implement the utilization of Content Delivery Networks (CDN) and cloud computing services in web applications using Nginx Proxy Manager and Docker containers. This research uses experimental methods and case studies to analyze the performance of web applications before and after using CDN services and implementing the application in a cloud computing environment using Docker containers. Next, Nginx Proxy Manager is used to provide a user-friendly interface for configuring and managing Nginx proxy servers. Docker containers are used to manage web applications and proxy servers. In the CDN and cloud computing environment, Cloudflare Google Cloud Platform will be used as service providers. The results of this research indicate a significant improvement in the security and reliability of web applications after implementing CDN services and adopting a cloud computing environment. Additionally, this research provides insight into how to use Nginx Proxy Manager and Docker container to manage web applications efficiently and effectively in a cloud computing environment.

WPAD: Waiting Patiently for an Announced Disaster

The Web Proxy Auto-Discovery protocol ( wpad 1 ) is widely used despite being flawed. Its purpose is to enable a client machine to autonomously identify an appropriate proxy, if any, to connect to. This can be useful in corporate networks, for example. Its vulnerabilities range from enabling an attacker to execute code remotely on client machines, to carry out SSL MITM attacks, to subvert Windows NTLM authentication, or even to steal Google authentication tokens. Several publications, talks, and blog posts have tried to raise awareness about some of these security issues. 23 distinct CVEs have been published. Nevertheless, wpad runs by default on Windows machines, and most users are unaware of its existence. Our goal is to offer within a single publication a survey of all the known vulnerabilities surrounding wpad , a presentation of some novel threats related to this protocol, as well as a description of mitigation and detection techniques to prevent the exploitation of its vulnerabilities. We hope that this publication will be an eye opener for all those concerned with the security of their networks and that the offered mitigation techniques will help them to deal with the numerous threats that wpad brings to their environments.

OpenAPI framework for the Web of Things

The Web of Things (WoT) Architecture recommendation of W3C defines a framework for integrating Things (e.g. devices) into the Web. It establishes an information representation of Things based on JSON-LD and RESTful API interfaces to enable access to Things. Leveraging the latest results on hypermedia construction and documentation of RESTful APIs, we argue that OpenAPI can also be used to provide documentation of Things that adheres to the W3C Architecture recommendation. OpenAPI is a widely accepted industry standard endorsed by prominent industry vendors and user communities. Therefore, it is mature and can become acceptable. An essential part of the approach is a mechanism that facilitates the generation of OpenAPI Thing Descriptions and a Web proxy that implements access to Things on the Web. An implementation of the API is also proposed and evaluated. Last but not least, OpenAPI achieves uniformity of representation of both types of WoT entities (i.e. Web services and Things) that co-exist and interact with each other in an application. This has a positive impact on the way WoT applications are designed and implemented.

High level browser security in cloud computing services from cross site scripting attacks

Getting the public cloud is truly hard for associations. Therefore, IT divisions are searching for a cloud-passed on a security plan that gives satisfactory end-customer security. An attacker can send malicious script to web browser in form of JavaScript, Script, Flash or any other type of code. When such type code executes in the browser, cookies redirects it to attacker location. These types of attacks are known as XSS (Cross Site Script) attacks. Cloud security is a discipline of organization wellbeing focused on getting appropriate processing structures. This consolidates securing data private and across the online-based establishments, applications, and stages. Further requests of client with encrypted cookies are sent to web proxy where web proxy decrypts these requests and forward to the web server. Browser information base store the encoded treat which won’t be valuable for the assailant in the event that it takes to utilizing cross-site prearranging assault.

Wireless Local Area Network Security through Protocol Wireless Protected Access

This study discusses the security analysis of Wireless Local Area Network (Wireless LAN) in the Community against external attacks on the Wireless Protected Access (WPA), Web Proxy, and Virtual Private Network (VPN) protocols, used to attack LAN. Three types of software are used as attackers, namely, Network Stumbler, Aircrack and Wireshark attackers. The software is used on the laptop at a distance of 5m to 25m from the Wireless LAN access point. From the experimental results, it can be seen that the fastest response time by the WPA Protocol was given by the Network Stumbler attacker, followed by Aircrack and Wireshark.

PENERAPAN WEB PROXY DAN MANAGEMENT BANDWIDTH MENGGUNAKAN MIKROTIK ROUTERBOARD PADA KANTOR POS PALEMBANG 30000

The Palembang 30000 POS office which is supported by information technology has a computer network that is directly connected to the ISP (Internet Service Provider) which has a bandwidth allocation of 20 Mbps. The problem at the Palembang 30000 POS Office is that there is no web proxy and Bandwidth Management application, so employees can access various sites that interfere with employee performance and employees who use the internet for free result in uneven bandwidth usage. The purpose of this study is to implement a web proxy and bandwidth management, so that the bandwidth is evenly distributed, therefore it is necessary to divide the bandwidth using a proxy routerboard, the method used for bandwidth distribution is using the simple queue method. By implementing a web proxy, it can control internet usage and block website sites that have the potential to interfere with employee performance, by making bandwidth management able to limit bandwidth usage and share bandwidth equally on each client, so internet access is now running more stable.

An SSH predictive model using machine learning with web proxy session logs

An SSH predictive model using machine learning with web proxy session logs

Fully Automated HTML and JavaScript Rewriting for Constructing a Self‐healing Web Proxy

SummaryOver the last few years, the complexity of web applications has increased to provide more dynamic web applications to users. The drawback of this complexity is the growing number of errors in the front‐end applications. In this paper, we present an approach to provide self‐healing for the web. We implemented this approach in two different tools: (i) BikiniProxy, an HTTP repair proxy, and (ii) BugBlock, a browser extension. They use five self‐healing strategies to rewrite the buggy HTML and JavaScript code to handle errors in web pages. We evaluate BikiniProxy and BugBlock with a new benchmark of 555 reproducible JavaScript errors of which 31.76% can be automatically self‐healed by BikiniProxy and 15.67% by BugBlock.

Algoritme penggantian cache proxy terdistribusi untuk meningkatkan kinerja server web

The performance of web processing needs to increase to meet the growth of internet usage, one of which is by using cache on the web proxy server. This study examines the implementation of the proxy cache replacement algorithm to increase cache hits in the proxy server. The study was conducted by creating a clustered or distributed web server system using eight web server nodes. The system was able to provide increased latency by 90 % better and increased throughput of 5.33 times better.

ANCAMAN KEAMANAN JARINGAN PADA SERVER UNTUK MEMBATASI WEBSITE TERTENTU MENGGUNAKAN MIKROTIK

<p><em>Mikrotik RouterOs ™ is an operating system and software that can be used to make a computer a reliable network router, designed to provide convenience for its users, the administration can be done through Windows application (Winbox), The server is a computer system that provides certain types of services (services) in a computer network, the server is supported by a processor that is scalable and a large ram is also equipped with a special operating system, called a (network operating system). The internet provides a lot of useful content if the user uses the internet well, besides that the<strong> </strong>internet can also have a negative impact on its users if the internet is used for negative things which will affect the young generation who will embrace this country to be the successor of this nation. outside the prevailing norms. Today the internet has many different types of social networking sites that have been used by many people, the goal or One of the solutions is that internet users do not access the negative or self-detrimental effects, using the Scientific of Inquiry method by limiting access to websites Specifically for prevention efforts in accessing negative internet sites in this case containing pornographic content is by blocking these negative sites permanently using a web proxy that serves to block some websites that cannot be accessed by clients through a browser on the Mikrotik Faculty of Engineering routers Ibn Khaldun Universit</em></p>

Comparation of distributed cache and centralized cache on web proxy

Caching is an object storage mechanism from a web page that has been accessed. With caching, bandwidth usage will be more efficient and the time to access a web page is getting faster. In caching there are 2 techniques used, namely centralized cache and distributed cache. The purpose of this study is to build a distributed cache system that supports Availability, Reliability, and Scalability. This system will overcome various problems found in the centralized cache, such as single point of failure, unreliable, and not scalable. With the availability of Availability, the system will avoid the problem of single point of failure by implementing a failover mechanism. For the Reliability system will still hold (reliable) accept requests from users, because some proxy servers (parent proxy) will serve requests from users. For Scalability, the system can add proxy servers easily and quickly. To develop the system, the developer takes several approaches such as basic learning about proxy servers and related theories. Next is an analysis to build a system that supports Availability, Reliability, and Scalability. Then the analysis phase is implementedand testing of the system is built. Tests carried out are testing centralized cache systems and testing distributed cache systems. The test results will then be compared to see the performance comparison between centralized cache and distributed cache.

Web Proxy Auto Discovery for Dynamically Created Web Proxies

The WLCG Web Proxy Auto Discovery (WPAD) service provides a convenient mechanism for jobs running anywhere on the WLCG to dynamically discover web proxy cache servers that are nearby. The web proxy caches are general purpose for a number of different http applications, but different applications have different usage characteristics and not all proxy caches are engineered to work with the heaviest loads. For this reason, the initial sources of information for WLCG WPAD were the static configurations that ATLAS and CMS maintain for the Conditions data that they read through the Frontier Distributed Database system, which is the most demanding popular WLCG application for web proxy caches. That works well for use at traditional statically defined WLCG sites, but now that usage of commercial clouds is increasing, there is also a need for web proxy caches to dynamically register themselves as they are created. A package called Shoal had already been created to manage dynamically created web proxy caches. This paper describes the integration of the Shoal package into the WLCG WPAD system, such that both statically and dynamically created web proxy caches can be located from a single source. It also describes other improvements to the WLCG WPAD system since the last CHEP publication.

Long-term Measurement and Analysis of the Free Proxy Ecosystem

Free web proxies promise anonymity and censorship circumvention at no cost. Several websites publish lists of free proxies organized by country, anonymity level, and performance. These lists index hundreds of thousands of hosts discovered via automated tools and crowd-sourcing. A complex free proxy ecosystem has been forming over the years, of which very little is known. In this article, we shed light on this ecosystem via a distributed measurement platform that leverages both active and passive measurements. Active measurements are carried out by an infrastructure we name ProxyTorrent, which discovers free proxies, assesses their performance, and detects potential malicious activities. Passive measurements focus on proxy performance and usage in the wild, and are accomplished by means of a Chrome extension named Ciao. ProxyTorrent has been running since January 2017, monitoring up to 230K free proxies. Ciao was launched in March 2017 and has thus far served roughly 9.7K users and generated 14TB of traffic. Our analysis shows that less than 2% of the proxies announced on the Web indeed proxy traffic on behalf of users; further, only half of these proxies have decent performance and can be used reliably. Every day, around 5%--10% of the active proxies exhibit malicious behaviors, e.g., advertisement injection, TLS interception, and cryptojacking, and these proxies are also the ones providing the best performance. Through the analysis of more than 14TB of proxied traffic, we show that web browsing is the primary user activity. Geo-blocking avoidance—allegedly a popular use case for free web proxies—accounts for 30% or less of the traffic, and it mostly involves countries hosting popular geo-blocked content.

Extensible Contemporary Communication

The crypto analysis approach to the partition table is defined not only by the understanding of infor-mation retrieval systems, but also by the intuitive need for the Ethernet. In fact, few cyberinformati-cians would disagree with the evaluation of hash.

Machine Learning for Web Proxy Analytics

Proxy servers used around the globe are typically graded and built for small businesses to large enterprises. This does not dismiss any of the current efforts to keep the general consumer of an electronic device safe from malicious websites or denying youth of obscene content. With the emergence of machine learning, we can utilize the power to have smart security instantiated around the population's everyday life. In this work, we present a simple solution of providing a web proxy to each user of mobile devices or any networked computer powered by a neural network. The idea is to have a proxy server to handle the functionality to allow safe websites to be rendered per request. When a website request is made and not identified in the pre-determined website database, the proxy server will utilize a trained neural network to determine whether or not to render that website. The neural network will be trained on a vast collection of sampled websites by category. The neural network needs to be trained constantly to improve decision making as new websites are visited.

Enhancing Greedy Web Proxy caching using Weighted Random Indexing based Data Mining Classifier

Web Proxy caching system is an intermediary between the Web users and servers that try to alleviate the loads on the origin servers by caching particular Web objects and behaves as the proxy for the server and services the requests that are made to the servers. In this paper, the performance of a Proxy system is measured by the number of hits at the Proxy. Higher number of hits at the Proxy server reflects the effectiveness of the Proxy system. The number of hits is determined by the replacement policies chosen by the Proxy systems. Traditional replacement policies that are based on time and size are reactive and do not consider the events that will possibly happen in the future. The performance of the web proxy caching system is improved by adapting Data Mining Classifier model based on Web User clustering and Weighted Random Indexing Methods. The outcome of the paper are proactive strategies that augment the traditional replacement policies such as GDS, GDSF, GD∗ which uses the Data Mining techniques.