Spring Mvc and Security Insights

A firewall is a control that allows or blocks network traffic according to rules about its source, destination, protocol and, in modern forms, its content and the application it belongs to.

A virtual private network carries traffic through an encrypted tunnel over a public network so that a remote device or site behaves as though it were connected to a private one.

An intrusion detection system watches network traffic or host activity for signs of attack and raises alerts, while an intrusion prevention system sits inline and can block what it recognises.

DHCP is the protocol by which a device joining a network asks for and receives an address, a subnet mask, a default gateway and DNS servers from a server, for a limited lease period, so that nobody has to configure addresses by hand.

A wireless LAN connects devices to a network over radio using the 802.11 family of standards, through access points that bridge the wireless medium onto the wired network and enforce the authentication and encryption that the shared airwaves demand.

TCP/IP is the family of protocols on which the internet runs: IP moves packets between addresses without guarantees, and TCP or UDP ride on top to deliver either a reliable ordered stream or fast unordered messages.

DNS is the distributed lookup system that turns a hostname such as getting-digital.net into the IP address a browser can connect to, by walking a chain of nameservers whose answers are then cached for a lifetime the domain's owner publishes.

SSL/TLS is the protocol that encrypts the connection between a browser and a server and, by way of a certificate signed by a certificate authority, proves the server is entitled to answer for the domain in the address bar.

A domain name is an address in the internet's public namespace that you rent through a registrar for a yearly fee, and it remains yours only while the registrar account holding it stays paid up and under your own control.