Guidelines on Safe Construction, Development, and Management of Websites

Article 1

1. Purpose: This guideline aims to provide guidance for individuals, legal entities, or organizations that build, improve, develop websites, and manage website hosting services, in order to reduce the risks of website attacks, hacking, website server service interruptions, and leakage of important databases, ensuring the convenience, speed, and security of providing information to society, accessing and using information, and providing information services.
2. Terminology Explanation: 1. "Web Page" refers to an electronic display board presented via the internet in the form of symbols, numbers, text, pictures, video, audio, and other forms; 2. "Website" refers to an information system composed of one or more web pages; 3. "URL" refers to a location identifier on the internet, consisting of a protocol name for accessing information (e.g., https://) and an internet domain name assigned to the website server (e.g., www.example.gov.la); 4. "World Wide Web (Web)" refers to a group of websites or computers that allow users to retrieve information via the http protocol; 5. "Web Server" refers to a computer that acts as a server and is installed with programs that provide website information services over the network; 6. "Web Server Software" refers to programs installed on the server that enable the server to provide website services, such as the Apache program and IIS (Internet Information Services) for Windows; 7. "Web Browser" refers to a program used to retrieve website information from a web server over a network; 8. "Web Application" refers to an application developed to be invoked and accessed via a web browser over a computer network (such as the internet or an intranet); 9. "Content Management System (CMS)" refers to a program for managing a website through an interface, facilitating the management of web pages and updating various related installation items; 10. "Website Communication Data Encryption (SSL/TLS)": SSL is an abbreviation for Secure Socket Layer, now developed into TLS (Transport Layer Security), referring to data encryption technology used to ensure the security of communication or data transmission between a server and a web browser or the application in use over the internet.