Skip to content

Lesson 01 β€” Web Fundamentals

Think about how many websites you use every day.

You may log in to:

  • Gmail
  • Amazon
  • LinkedIn
  • Microsoft 365
  • AWS Console
  • Azure Portal
  • GitHub
  • Banking Applications

Within seconds, your browser retrieves pages, displays images, processes forms, and communicates securely with servers located anywhere in the world.

Have you ever wondered what actually happens after you type a website address into your browser?

Understanding how the web works is the first step toward understanding web security.

Every cybersecurity professional, cloud engineer, DevSecOps engineer, penetration tester, and security architect should understand the technologies behind modern web applications.


After completing this lesson, you will be able to:

  • Understand the World Wide Web.
  • Learn how websites work.
  • Understand clients and servers.
  • Explore web architecture.
  • Learn URLs and web resources.
  • Understand browsers.
  • Explore modern web applications.
  • Apply enterprise web concepts.

The World Wide Web (WWW) is a global system of interconnected web pages and applications that are accessed through the Internet.

The web allows users to:

  • Browse websites
  • Access cloud services
  • Shop online
  • Watch videos
  • Send emails
  • Use enterprise applications
  • Access APIs

The Web runs on top of the Internet using standard communication protocols.


Many people think they are the same, but they are different.

Internet World Wide Web
Global network infrastructure Collection of websites and web applications
Connects computers worldwide Runs on top of the Internet
Transfers all types of network traffic Primarily delivers web content
Supports many protocols Primarily uses HTTP and HTTPS

The Internet is the network; the Web is one of the services running on it.


A Website is a collection of related web pages hosted on a web server and accessed through a web browser.

Examples include:

  • Company websites
  • E-commerce platforms
  • Banking portals
  • Government services
  • Learning platforms
  • Cloud management consoles

Websites can be static or dynamic depending on how content is generated.


The web follows a Client-Server Architecture.

User
↓
Web Browser (Client)
↓
Internet
↓
Web Server
↓
Response
↓
Browser Displays Website

The browser requests information, and the server responds with the requested content.


A Web Browser is software used to access websites and web applications.

Popular browsers include:

  • Google Chrome
  • Microsoft Edge
  • Mozilla Firefox
  • Safari

Browsers interpret HTML, CSS, and JavaScript to display web content.


A Web Server is a system that hosts websites and responds to requests from web browsers.

Common web servers include:

  • Apache HTTP Server
  • NGINX
  • Microsoft IIS
  • Caddy

Web servers deliver web pages, images, APIs, and other resources to clients.


A URL (Uniform Resource Locator) specifies the location of a web resource.

Example:

https://www.cloudnova.com/login

A URL typically contains:

  • Protocol
  • Domain Name
  • Path
  • Query Parameters (optional)
  • Fragment (optional)

https://www.cloudnova.com/login
β”‚ β”‚ β”‚
β”‚ β”‚ └── Resource Path
β”‚ └────────────────── Domain Name
└─────────────────────────── Protocol

Each component tells the browser where and how to access a resource.


  • Fixed content
  • Faster loading
  • No database
  • Simple HTML pages

Examples:

  • Portfolio websites
  • Documentation sites

  • Database-driven
  • User authentication
  • Personalized content
  • Interactive features

Examples:

  • Banking portals
  • Social media platforms
  • E-commerce sites
  • SaaS applications

Modern web applications commonly use:

  • HTML
  • CSS
  • JavaScript
  • HTTP/HTTPS
  • APIs
  • Databases
  • Cloud Services

Together, these technologies create interactive web experiences.


User
↓
Browser
↓
Internet
↓
Load Balancer
↓
Web Server
↓
Application Server
↓
Database
↓
Response

Enterprise web applications often include additional layers such as caching, firewalls, and monitoring systems.


Cloud providers host web applications using managed services.

  • Amazon EC2
  • Elastic Load Balancer
  • Amazon CloudFront
  • Amazon S3 Static Website Hosting
  • Azure App Service
  • Azure Front Door
  • Azure Load Balancer
  • Cloud Run
  • App Engine
  • Cloud Load Balancing

These services simplify deployment and scaling of web applications.


Kubernetes hosts web applications using:

  • Pods
  • Services
  • Ingress Controllers
  • Load Balancers

This enables scalable and resilient web deployments.


Web technologies power:

  • Online Banking
  • Healthcare Portals
  • Government Websites
  • SaaS Platforms
  • Enterprise Dashboards
  • Cloud Management Consoles
  • E-commerce Applications
  • Learning Platforms

Almost every modern business relies on web technologies.


Avoid:

  • Confusing the Internet with the Web.
  • Assuming browsers and servers perform the same role.
  • Ignoring HTTPS.
  • Exposing sensitive information through insecure websites.
  • Forgetting to validate user input.

Understanding the fundamentals helps prevent security issues later.


Professional organizations:

  • Use HTTPS for all websites.
  • Deploy Web Application Firewalls (WAFs).
  • Keep web servers updated.
  • Implement secure authentication.
  • Monitor web traffic.
  • Follow secure coding practices.
  • Regularly assess web application security.

These practices help build secure and reliable web applications.


CloudNova Technologies hosts its customer portal in the cloud.

Customer Browser
↓
HTTPS Request
↓
Cloud Load Balancer
↓
Web Server
↓
Application Server
↓
Database
↓
Secure Response

Every customer request travels through multiple layers before the web page is securely displayed.


After completing this lesson, you should understand:

  • World Wide Web
  • Internet vs Web
  • Websites
  • Clients
  • Servers
  • Web Browsers
  • Web Servers
  • URLs
  • Web Architecture
  • Enterprise Web Applications

The World Wide Web is the foundation of modern digital communication.

Understanding how browsers, web servers, URLs, and web applications interact provides the knowledge required to secure modern applications, cloud services, APIs, and enterprise environments.

This knowledge is essential for Cloud Security Engineers, Security Architects, DevSecOps Engineers, SOC Analysts, Penetration Testers, and cybersecurity professionals responsible for securing web technologies.


➑️ Lesson 02 β€” Web Architecture

In the next lesson, you’ll learn how modern web applications are designed and deployed using enterprise web architectures. You’ll explore multi-tier architecture, front-end and back-end components, load balancers, reverse proxies, databases, CDNs, microservices, cloud-native web architectures, and the security considerations involved in building scalable and resilient web applications.