Comprehensive E-Business and Web Technology Study Guide

Fundamental Concepts and Definitions of E-Business and E-Commerce

E-business is an overarching term that encompasses the area of E-commerce. It refers to economic relationships and business processes conducted through the use of internet technologies. Unlike a narrow focus on sales, E-business includes the handling of administrative and operational business processes using modern Information and Communication Technology (ICT). Central elements of the E-business concept include economic significance, communication and trade between at least two participants, and the utilization of technologies deployed on the internet. It is not restricted solely to the Business-2-Business (B2B) segment; it also covers Business-to-Consumer (B2C) applications, such as the use of online shops.

E-commerce, viewed as a subset of E-business, specifically describes trade based on internet-centered technologies. This commonly involves applications like electronic shops (eShops) in the B2C sector. In the B2B segment, examples of E-business applications include Web Electronic Data Interchange (WebEDI) and Supply Chain Management (SCM). Other forms of electronic business in a broader sense have historically included the BTX service of the Deutsche Bundespost and the Teletel/Minitel system from France Telecom. In contrast, the use of telegraph connections in the 19th century or simple job boards for job seekers do not represent E-business in the modern, internet-centric sense.

Web Technology Standards: HTML, CSS, and DHTML

HTML (Hypertext Markup Language) serves as the fundamental basis for every website. It is an evolving standard developed and maintained by the World Wide Web Consortium (W3C). HTML supports various multimedia formats, including videos, and uses specific structural elements like body tags for tables, lists, and forms. Common field types in HTML forms include $“Password”$ and $“Reset”$ . In contrast, $“Post”$ is an HTTP method rather than a field type, and $“Value”$ is an attribute.

Cascading Style Sheets (CSS) provide many advantages over manual web publishing. The core characteristic of CSS is the strict separation of content and formatting. This separation ensures that the source code of a website remains clear and manageable. Using CSS acts as a design template; a redesign of an entire web presence can be achieved without manually editing every single page. This technology does not negatively affect search engine rankings and can be dynamically altered using scripting languages. While CSS is often defined in separate documents, it can also be embedded directly in the HTML structure using the $<style>$ tag or inline styles. For example, setting red text can be achieved via $<p style="color:red;">$ or using the hex code #FF0000.

Dynamic HTML (DHTML) is not a single protocol but a combination of technologies—specifically HTML, CSS, and a scripting language (typically JavaScript)—used to create interactive and animated websites. Although the term is used less frequently in the era of Web 2.0, its foundational principle of making web content interactive remains essential.

Network Infrastructure and Hardware Components

Enterprising network communication relies on various hardware components operating at different layers of the ISO/OSI model. A Router operates on the Network Layer (Vermittlungsschicht) and is responsible for active path selection, meaning it dynamically searches for routes to forward data packets. A Switch typically operates on the Data Link Layer (Sicherungsschicht). A Repeater or a Hub operates exclusively on the Physical Layer (Bit#bertragungsschicht); their primary function is to regenerate or amplify signal strength in a WLAN or LAN. A Bridge is another component that functions on the Data Link Layer to connect network segments.

The topology of a network significantly impacts its reliability. A Meshed Structure (vermaschte Struktur) is characterized by the highest level of failure safety because multiple paths exist between nodes. Other common topologies include Star, Ring, Line, Bus, and Tree structures. The ISO/OSI Reference Model itself is a conceptual 7-layer schema that decomposes communication processes into manageable sub-tasks. It is not a concrete protocol but a framework. Within this model, the Protocol Control Information (PCI) contains the steering data of a specific layer. A Service Access Point (SAP) defines the interface of a layer and specifies the services used by that layer.

Internet Protocols: TCP/IP, UDP, and IP Addresses

The TCP/IP Protocol Suite is a 4-layer model consisting of the Application, Transport, Network (Internet), and Network Access layers. It is the practical implementation used by the internet and is oriented towards the ISO/OSI model.

The Internet Protocol (IP) is a connectionless, content-neutral protocol that facilitates the addressing of computers in a network and the transport of data packets (datagrams) across intermediate stations (routers). The transition from IPv4 to IPv6 was motivated by the shortage of available IPv4 addresses and the massive increase in devices with internet access. Solutions to address the IPv4 scarcity include Network Address Translation (NAT) and Port Address Translation (PAT). Valid IPv4 addresses consist of four blocks of numbers (each ranging from 0 to 255) separated by dots; for example, $141.48.256.207$ is invalid because 256 exceeds the allowed range.

On the Transport Layer, two primary protocols are used: TCP and UDP. Transmission Control Protocol (TCP) is a connection-oriented protocol providing full-duplex communication, error detection, and flow control. It ensures maximum transport security but incurs higher overhead, especially during connection establishment and termination. In contrast, User Datagram Protocol (UDP) is connectionless and provides a simplex-type connection. It is faster and more resource-efficient than TCP because it lacks error control and communication phases (setup/teardown). UDP allows for broadcasting and multicasting, with a maximum packet size of $2^{16}$ bytes ( $65535\,\text{bytes}$ ). A Port is an addressing component used on the transport layer to assign data packets to the correct application protocol.

Application Layer Services: DNS, Email, and FTP

The Domain Name System (DNS) is a hierarchical, decentralized system that maps symbolic web addresses (domain names) to numerical IP addresses. The DNS namespace is divided into zones, each managed by a specific administrator. There are 13 Root DNS servers worldwide. While DNS is essential for browsing (HTTP), it is also used by other services like email.

Electronic mail communication involves several protocols. Simple Mail Transfer Protocol (SMTP) is used to send emails and is push-oriented. Common SMTP commands include $HELO$ , $DATA$ , and $RCPT TO:$ . For retrieving emails, Post Office Protocol version 3 (POP3) or Internet Message Access Protocol (IMAP) are used. POP3 is TCP-based, pull-oriented, and involves authorization via username and password. Classic email is often compared to a postcard because, without additional measures, the content can be viewed or changed by third parties, and the authenticity of the sender is not guaranteed.

File Transfer Protocol (FTP) is used for transferring files between a client and a server. It typically utilizes a control connection and a data connection. Security in FTP is maintained through session-related authentication (username/password) and user-specific rights management. The Hypertext Transfer Protocol (HTTP) is the primary transport service of the World Wide Web. It is request-response oriented and stateless, meaning it does not maintain information about the user across multiple individual requests.

Web Content Management and Publishing Strategies

Manual web publishing faces several problems, including the potential for webmasters to become bottlenecks, outdated content, and the difficulty of merging content from different editors. Web Content Management Systems (WCMS) solve these issues by automating routine tasks and enabling a strict separation of content and layout. A WCMS typically includes components like APIs, import/export interfaces, access and user management, Asset Management (managing digital objects), and Workflow Management. Workflow Management systems implement digital release cycles (quality assurance) and locking mechanisms to prevent the publication of unapproved assets.

Cross-Media Publishing involves reusing the same content for various end devices or publication channels. This strategy increases efficiency in distribution and helps attract customers through multiple channels. However, it requires deep process changes and carries the risk of cannibalizing existing channels. Content Syndication refers to the use of content from multiple sources or a joint distribution organization for content. This allows for cost reduction through reuse and potentially higher content quality.

Economically, the use of a WCMS allows for scale effects. While manual maintenance costs might rise exponentially with the number of pages, a WCMS leads to a more linear cost progression due to automated routine processes and the reuse of content templates.

Online Shop Systems and Session Tracking

Online shops provide customers with benefits like fast product searching and 24/7 availability. Core functions of a typical online shop include an Electronic Product Catalog (EPK), a shopping cart, order functionality, and user tracking. An EPK offers advantages over traditional print catalogs, such as nearly unlimited information depth, new opportunities for one-to-one marketing, and the elimination of printing and shipping costs. Online shops are frequently integrated with external systems like Enterprise Resource Planning (ERP/Warenwirtschaftssysteme), electronic payment systems, and financial accounting.

Because HTTP is stateless, Session Tracking is required to maintain a user’s state (e.g., keeping items in a shopping cart). Technologies used for this include Cookies, URL-Encoding, and Hidden Form Fields. Cookies are files stored on the client side that can identify users across different sessions. URL-Encoding involves transmitting a unique token as a name-value pair within the HTTP request. To prevent fraud (Fraud-Checks), shop operators use address validation, creditworthiness checks, and the Luhn Check for credit card verification. Common security threats include Credit Card abuse, Junk Orders, and Distributed Denial of Service (DDoS) attacks.

Internet Marketing and Success Metrics

Internet marketing offers lower scattering losses (Streuverluste) and better measurability compared to regional print media. The AIDA model (Attention, Interest, Desire, Action) describes the phases a consumer goes through. Marketing strategies include Search Engine Optimization (SEO), Paid Placement (buying ad space on search results), and Affiliate Marketing (cooperation between partners to place ads). Electronic Customer Relationship Management (e-CRM) integrates all customer-oriented processes and can be divided into communicative, operative, and analytical e-CRM.

Success is measured using specific Key Performance Indicators (KPIs):

Tausender-Kontakt-Preis (CPM): The price for 1000 ad impressions. $\text{CPM} = \frac{\text{Price of Placement}}{\text{Website Visitors}} \times 1000$ .
Click-Through Rate (CTR): The ratio of users who clicked an ad to the total number of users contacted.
Cost per Click (CPC): The payment method where costs are incurred only when a user clicks on the advertisement.
Conversion Rate (CR): The percentage of visitors who perform a desired action (e.g., purchase). $\text{CR} = \frac{\text{Number of Transactions}}{\text{Number of Visitors}} \times 100$ .
Cost per Action (CPA): For example, if 1000 ads cost $200\,€$ , the CTR is $20\%$ , and the CR is $2\%$ , the calculation is as follows: 1000 ads yield 200 clicks ( $1000 \times 0.20$ ). 200 clicks yield 4 transactions ( $200 \times 0.02$ ). The Cost per Action is $200\,€ / 4 = 50\,€$ .

IT Security and Cryptography

Secure communication requires Confidentiality (Vertraulichkeit), Integrity (Integrit#t), Authenticity (Authentizit#t), and Non-repudiation (Verbindlichkeit). Practical security is ensured if the cost of breaking the encryption exceeds the value of the information, or if the time required to break it exceeds the period for which the information is relevant.

Symmetric Encryption uses the same secret key for both encryption and decryption (e.g., the Enigma). This leads to a key exchange problem among multiple participants ( $6\,\text{participants}$ would require $15$ keys if using Metcalfe’s Law logic, or $6$ keys as per the transcript context). Asymmetric Encryption uses a key pair: a public key for encryption and a private key for decryption. This solves the key exchange problem but is computationally slower than symmetric methods.

Digital Signatures ensure authenticity and integrity. Often, a Hash Function is used to generate a "digital fingerprint" of a document. This hash value is then signed with the sender’s private key. The recipient decoys it with the sender’s public key to verify that the document has not been manipulated. Digital Certificates, issued by a Certification Authority (CA), prevent Man-in-the-Middle attacks by proving the ownership of a public key. Kerckhoffs's Principle states that a cryptographic system should be secure even if everything about the system, except the key, is public knowledge.

Web 2.0 and Web Applications

Web 2.0 is characterized by User-Generated Content (UGC) and the rise of the Prosumer—a user who both consumes and produces content. It is defined by network effects, such as Metcalfe’s Law, which states that the value (or number of connections) in a network grows with the square of the participants ( $5\,\text{participants}$ lead to $10$ bidirectional connections). The Long Tail phenomenon describes how the internet allows for a broad product range (even niche products) because of negligible production and storage costs for digital goods. Typical Web 2.0 services include Wikis, Weblogs (featuring comments and pingbacks), and Social Networks.

Web Applications differ from static websites by using application logic to react individually to users. Client-side technologies (e.g., JavaScript, ActiveX, Applets) are interpreted by the browser. They reduce server load but require the client to have specific processing capabilities. JavaScript is a platform-independent, interpreted scripting language (not to be confused with Java). Server-side technologies (e.g., ASP, JSP) generate HTML dynamically on the server. While this protects the application logic and hides it from the client, it can lead to high server load.

Questions & Discussion

Which HTML code generates red text? All provided options ( $a, b, d$ ) are technically capable of producing red text, although option $b$ ( $<p style="color:red;">$ ) and $d$ (using a style block) are modern standards compared to the deprecated $<font>$ tag. Note that option $c$ claims to be "gr#n" (green) despite the hex code for red (#FF0000).

What are the components of a search engine? Based on the diagrams, a search engine typically consists of a Robot-System (or Spider/Crawler), a Gatherer (to collect data), a Loader, and a Query Processor. The process begins with a user request, which the Query Processor analyzes to provide a result list from the database of indexed pages.

How does a Shift Cipher work? For the word "klausur" with a key of $k=3$ , the cipher shifts each letter three places forward in the alphabet: $k \rightarrow n$ , $l \rightarrow o$ , $a \rightarrow d$ , $u \rightarrow x$ , $s \rightarrow v$ , $u \rightarrow x$ , $r \rightarrow u$ . The result is "nodxvxu".