Security Technologies for the World Wide Web / Edition 1

by Rolf Oppliger

Overview

This newly revised edition of the Artech House bestseller brings you the most, up-to-date, comprehensive analysis of the current trends in WWW security available, with brand new chapters on authentication and authorization infrastructures, server-side security, and risk management. You also find coverage of entirely new topics such as Microsoft.NET Passport. From HTTP security, firewalls and proxy servers, cryptographic security protocols, electronic payment systems? to public key infrastructures, authentication and authorization infrastructures, and client-side security, the book offers an in-depth understanding of the key technologies and standards used to secure the World Wide Web, Web-based applications, and Web services.

Product Details

ISBN-13:	9781580530453
Publisher:	Artech House, Incorporated
Publication date:	10/01/1999
Series:	Computer Library Series
Pages:	444
Product dimensions:	6.37(w) x 9.29(h) x 1.29(d)

About the Author

Rolf Oppliger is the founder and owner of eSECURITY Technologies (www.esecurity.ch) and works for the Swiss Federal Strategy Unit for Information Technology (FSUIT). He is the author of Internet and Intranet Security, Second Edition (Artech House, 2002), Secure Messaging with PGP and S/MIME (Artech House, 2001), and Authentication Systems for Secure Networks (Artech House, 1996). Dr. Oppliger is the computer security series editor at Artech House. He received his M.Sc. and Ph.D. in computer science from the University of Berne, Switzerland, and the Venia legendi in computer science from the University of Zürich, Switzerland.

Table of Contents

Contents:
Introduction — The Internet. The World Wide Web. Vulnerabilities, Threats and Countermeasures. Generic Security Model.

HTTP User Authentication and Authorization — Basic Authentication. Digest Authentication. Certificate-Based Authentication. Authorization and Access Control.

Proxy Servers and Firewalls — Packet Filtering and Stateful Inspection. Circuit-Level Gateways. Firewall Configurations.

Cryptographic Techniques — One-Way Hash Configurations. Secret Key Cryptography. Public Key Cryptography. Legal Considerations. Notation.

Internet Security Protocols — Network Access Layer Security Protocols. Internet Layer Security Protocols.
Transport Layer Security Protocols. Application Layer Security Protocols.

The SSL and TLS Protocols — The SSL Protocol. The TLS Protocol. Firewall Tunneling.

Electronic Payment Schemes.

Managing Certificates — A Distributed Certificate Management System. Attribute Certificates. Certificate Revocation.

Executable Content — Binary Mail Attachments. Scripting Languages. Java Applets. Activex Controls.

Mobile Code and Agent-Based Systems — Protecting the Run-Time Environment. Protecting the Mobile Code.

Copyright Protection — Watermarking. Fingerprinting. A Secure Document Distribution System.

Privacy protection and Anonymous Browsing — Cookies. The Anonymizer. Onion Routing. Lucent Personalized Web Assistant. Crowds. Janus. Taz Servers and the Rewebber Network.

Censorship on the WWW — Content Blocking. Content Rating and the Platform for Internet Content Selection.

Area of Further Study — Provably Secure Cryptographic Techniques. Trust Management. High-Speed Networking. Multicat Communications. Resource Reservation and Billing Schemes.

Editorial Reviews

Shows webmasters, security chiefs, and IT managers an overview and analysis of current trends in WWW security, and evaluates existing technologies, such as anonymity services and security products. Coverage includes proxy servers and firewalls, cryptographic techniques, electronic payment systems, and executable content. Other subjects are copyright protection, privacy protection, and censorship. Includes a glossary. The author is employed by the Swiss Federal Strategy Unit for Information Technology. Annotation c. Book News, Inc., Portland, OR (booknews.com)

Booknews