What is this talk not about?

• Network security in general:

  • Unauthorized logins, etc.

  • Firewalls

• Firewalls are not interesting to us

  • We want to let people into our web service

  • What are the real risks of doing that?

  • How can they be controlled?

• See the bibliography for books about firewalls and network security in general