Transcript
Page 1: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Securing Web Access

Senior Design III – Spring 2009Matt Shea

Page 2: Securing Web Access Senior Design III – Spring 2009 Matt Shea

OverviewIntroductionProject Description and Intended UseDesign ProtocolsDeliverablesDemonstrationConclusion

Page 3: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Introduction

ProblemNo way to monitor Web accessBandwidth UsageSecurity Issues

Page 4: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Project Description/Intended UseSetup Web Proxy Server

Open-sourceFiltering Capabilities

By DomainBy File/MIME Type

Reporting features

Page 5: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Design ProtocolsCentOS v. 4.7

Clone of Red Hat Enterprise LinuxSquid Proxy Server

Open Source Proxy ServerMySQL Squid Access Report

Reporting and Analysis ToolSquidGuard

Content filter plug-inPerl

Used for Custom Script

Page 6: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Network Topology

Page 7: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Data FlowInternet

Router

Squid Proxy

Router

Switch

Client

Page 8: Securing Web Access Senior Design III – Spring 2009 Matt Shea

DeliverablesInstall/Configure CentOS v 4.7 Virtual MachineSetup Windows XP Client Virtual MachineInstall/Configure Squid Proxy ServerInstall/Configure MySQL Squid Access ReportInstall/Configure SquidGuard Content FilterWrite Script to translate IP Address to MAC AddressSetup Linux machine as a router to forward all

Web requests from clients to the proxy server

Page 9: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Demonstration

Page 10: Securing Web Access Senior Design III – Spring 2009 Matt Shea

ConclusionWeb Proxy Solution for Accounting Firm

Utilized Open Source ToolsHas Reporting and Filtering

FunctionalityMeets need of Business

Page 11: Securing Web Access Senior Design III – Spring 2009 Matt Shea

Questions?


Recommended