ist 346 Final
policy issues of email
-ECPA compliance- email requires consent -archival policy -subpoenas- pulling emails from backups for a court order -employees use company property
What are some concerns which need to be addressed in a production mail setup?
-SMTP doesnt need to be authenticated -no TLS encryption -no spam system -no scaling strategy -no directory service
Technological issues of email
-uses lots of storage -complicated service -requires lots of servers -SPAM -not that secure -easy to spoof
Anatomy of Email
3 components: Protocols, APIs, Components. protocols: IMAP4, POP3, SMTP, IMAPS APIs: SMTP, MIME, various RFCs Components: MUA, MTA, MDA, AA, message store
what's Roundcube? (used in email lab)
A container thats a webmail client. MUA
Web API's JSON, XML
APIs are code you execute in your program that someone else wrote. Web APIs are APIs executed over the HTTP or HTTPs protocol. Allows us to leverage services in the cloud to our own program JSON is a lightweight format API for storing and transporting data, often used when data is sent from a server to a web page XML is machine readable content formal similar to HTML. allows for the design of schemas so that any data formal can be represented.
web scalability and reverse proxies
An HTTP reverse proxy is an HTTP server which retrieves resources from one or more servers on behalf of a client. used to limit exposure of web application. Web can be scaled vertically, horizontally (add load balancer and 2 servers) and up and out (add a bunch of web servers and database servers)
What is a topic?
An MQTT topic is the channel for the IoT data. One MQTT broker can handle millions of messages so we use topics to categorize messages similar to each other
4. which native mobile application development platform uses Java for its programming language
Android
Popular mobile operating systems
Apple iOS and Google Android
Other kinds of messaging applications
Chat/ IM Slack Microsoft teams Yammer Video chat (Zoom)
Types of IoT and their examples
Consumer (smart thermostat) Commercial (Pro Sports team data collection) Industrial (Amazon robots to locate items on shelves) Infrastructure (smart cities)
5. The contents of web pages are primarily coded in
HTML
2. The protocol for retrieving email messages is
IMAP
Where does the majority of the processing occur in an IoT network?
Little to no actual processing occurs in an Iot sensor. The decision making on whether or not to send an email will occur in the software application, like NodeRed platform.
16. The protocol for IoT messaging is
MQTT
components of an email and their terminology
MUA = mail user agent MTA = message transfer agent MDA= mail delivery agent AA= access agent
MUA MTA MDA AA
Mail user agent (outlook, gmail etc.) Message transfer agent. sends mail around the internet Mail delivery agent. writes mail to the mail message, from MDA to message store Acess agent. Exposes a protocol so users can read mail from the message store
IoT architecture MQTT and gateways
Message Queuing Telemetry Transport is a protocol for IOT. Messages are categorized by topics, and MQTT broker collects messages from publishers and push through gateways (?)
Native, Hybrid, PWA, app development- differences, pros, cons
Native- write the app in the language of the mobile OS. Best performance, but unique for every platform and challenging to maintain hybrid- write the app in an intermediate language which then either complies to native or PWA. One language for all OS, access to MOST hardware, not suitable for some applications PWA- write the app in HTML and JavasScript as you would a website. Easiest skillset, don't need to put in app store, not suitable for some applications or supported by all platforms, least access to hardware
6. A protocol for authenticating a web API is
OAUTH2
What is the difference between a PATCH and a PUT?
PUT is for replacing the entire record, and PATCH is for partial updates.
how mobile differs from web
Phones have a browser, but most of our experiences use native apps downloaded. Advantages: offline data, push notifs, better performance, access to hardware features like camera or microphone
whats the mobile application development process that doesn't require an upload to the app store
Progressive Web app
9. Which is not a typical responsibility of a mobile back end as a service
Publishing to app stores
Provide an example of something you use everyday which would be considered IoT?
Roomba, smart fridge/ washing machine.
18. The protocol for sending email is
SMTP
3. which of the following is not a concern which should be addressed in a production email setup
SMTP access to this public
SMTP vs IMAP.. which one sends mail and which retrieves it?
SMTP does the sending to a mailbox, and IMAP allows a user to retrieve it.
When you send an email from an actual mail client, which protocol(s) are used and why?
SMTP to send the email and IMPA to save a copy in the sent folder
Software defined product/ hardware defined product
Software defined product is a product that is made what it is because of the software application, which is programmable & updatable, and the cybermodel, the statistical model which assists in decision making hardware defined product is made what it is bc of its hardware. Sensors to gather data, actuator to alter environment, and embedded system, packages data and sends over internet.
What is telnet? What is the value of using Telnet to connect to any TCP protocol?
Telnet is a protocol that allows us to interact with the mail server from our terminal at the protocol level. This isn't how you could normally use email, but shows how application layer protocols like SMTP and IMAP work. Can be used to troubleshoot.
What is IoT and how is it different from smart devices?
The Internet of Things or IoT represents technologies embedded into everyday objects so that they can communicate over the Internet. From WiFi tooth brushes to traffic cameras, it seems like nothing is immune from the IoT craze. IoT is different from smart products. While things like a washing machine that sends text when clothes are dry is considered IoT, true IoT derives value from being smart and connected. It is more than a device, it is a combo of device, software, network, and interface
What is the purpose of an MQTT Broker like Mosquitto?
The MQTT Broker collects messages from the sensors and queues them until the Node Red platform is ready to consume and process them. the MQTT broker prevents loss of data over the network between sensors and platforms which process the data. Without MQTT we would not be able to make changes to the IoT platform without losing data!
what are the purpose of the email message headers?
They include information like who the message is to/from, either the message was identified as SPAM, the date/time is was sent, and the message id. All this stuff helps the mail client determine what to do with this message and how to display it to us.producpr
TLS, SSL, termination
Transport Layer Security- encrypts traffic over wire to protect against "Man in the Middle" attacks. Acquire certificate from authority, and browsers "trust" authority and encrypt traffic. (https) SSL????? TERMINATION???
URL HTML Web Server Web Browser Resource
URL = global name space which identifies a resource on the web HTML= Markup language for rendering web pages Web Server= a computer on the web which hosts resources web browser= a computer on the web which consumes resources resource= content at a URL, hosted on a web server and requested by a web browser
What is the purpose of a software application like Node Red?
a data flow based programming tool for the Internet of Things, to send us an email when the glass is empty. The Node Red application is subscribed to listen for messages on the same topic. When it sees a message it processes the message by displaying it to the debut window.
10. to scale HTTP services horizontally we need
a load balancer
What is covered in a code of ethics and/or code of conduct policy
acceptable use policy + network monitoring policy and privileged access code of conduct
What is Swagger?
an API documentation tool which automatically generates sample instructions for how any API can be consumed. Swagger shows us the different endpoints to interact with our content, whether we want to list it, add to it, or change it.
8. your company needs to manage iPads used as automated sales kiosks. a possible solution could be
an MDM system
What is an OAuth 2 access token? What is the relationship between it and the client secret and client id pair?
an opaque string, generated from the client secret which provides the bearer of the token access to the API for a limited amount of time. Any client with the access token can access the API with the set permissions for as long as the token is valid. typically the access token is generated as requested by an authenticated client.
What is Squidex?
an open-source, content-as-a-service platform used to create APIs. Squidex is a headless content management system. It allows you to create custom content definitions (schema) and it will create an HTTP API that allows you to create, retrieve, update and delete (CRUD) your custom content.
How the web works, request verbs and status codes
clients make requests to web servers, typically using a browser. the client provides a request method and URL. verb (nature of the request) + URL (the resource to request) The web server send a response to the client. In the response is the content based on the URL. The client renders (draws) the content in the web browser. Status code (what happened) + content type (the actual content)
what are the various IoT types?
consumer commercial industrial infrastructure
what are the responsibilities of mobile backend as a service? which aren't needed as well
contains the web APIs required by the application and other services like push notifs. saves you development and admin resources in mobile app. data storage, scalability, usage analytics, identity management and social auth.
15. in the web API lab we used as application called Squidex, which could be best classified as...? What is Squidex
content as a service. Squidex is an open-source, content-as-a-service platform used to create APIs.
What and why of ethics?
ethics are the principles of conduct that govern a group of people. not morals.. what is ethical isnt clear bc there might not be clear policies important bc SAs have privledge to confidential info, they must be responsible and people must be able to trust you with the access
Mobile device management
getting apps into the stores, search + install. Mobile Device Management Systems remotely install apps on devices. Run separate internal App stores. Control which apps can be launched/ accessed.
13. an email address such as [email protected] is an example of which type of namespace?
global and hierachical
Whats a global namespace? whats a hierachial namespace?
global is the @syr.edu or @gmail while hierarchial is the names on the global namespace like rjisley
Whats an MDM systems role? What is it primarily used for?
hint. the importance of automation of tasks software that allows IT administrators to control, secure and enforce policies on smartphones, tablets and other endpoints. Important to automate ethical policy
whats the difference between IoT and smart devices
hint: a specific model is in existence IOT derives value from being smart and connected. its more than the device, also includes the software, network, and UI. software defined product + hardware defined product
example of a sensor and an actuator
in a thermostat, notices too hot actuator would activate air conditioning
HTTP protocol: what forms does it always return content in a response
in code. status code: what happened content type: the actual content
What is OAuth 2?
industry-standard protocol for authenticating to a Web API. So we can expose API to clients securely without giving everyone the password
How IMAP works
internet-> MTA->MDA (exchange hubs-> message store-> AA (Exchange) -> MUA
Does NodeRed actually connect to the IoT device? Explain your answer
it never actually connects to the devices, but instead listens for messages to arrive on our MQTT broker.
What are the concerns that are addressed in terms of setting up and producing email
lots of storage, spam, not that secure, lots of servers, legal and ethical compliance policies, archival policy
12. Info of who the email message is to, and whether the message was identified as SPAM are called
message headers
how are ethics different from morals?
morals are the proclomation of what is right and good, while ethics are principles of conduct. ethics are defined, while morals are more like a moral compass
11. which mobile app development process creates applications which generally perform the best
native
Privileged access? What is it? Who has it?
people with privleged access can see other peoples otherwise private info. need a special code of conduct on how to act. must be trained in ethics and code of conduct, policy, and procedure
Why must we include the bearer token with every API call? How come there is no short-cut method where we login one and it persists for the entire session?
reThe HTTP protocol is stateless. This means that the requests do not know about each other. Because each request is completely isolated from the other we must include our credentials with every request. That's right. When you "log on" to a website, it saves a similar token and that token goes back to the server on every request to make sure "its really you" and that you are still "logged in." Such is the way of the web!c
types of IoT analytics
retrospective analytics- what happened? diagnostic- why did it happen? descriptive- whats happening now predictive- what will happen prescriptive- what should i do about it?
what is required to provide access to an HTTP service behind a firewall?
reverse proxy
MBaaS- what they do
saves development and administrative resources in mobile app initiatives. Data storage with Web APIs, push notifs, auto scalability, client device analytics and usage statistics, handles identity management and social authentification
7. An IOT hardware defined product consists of
sensors and actuators
How STMP works
simple mail transport protocol MUA (source)-> MDA (exchange)-> MTA (sendmail)-> through the internet -> MTA->MDA-> message store
1. The HTTP protocol always returns back content and a .... in the response?
status code
14. an automated web API documentation tool is known as
swagger
for SMTP requests why do we authenticate
to attempt to filter out spam
17. Why is it important to authenticate SMTP requests
to prevent spammers from sending email
