Security Technologies for the World Wide Web 

1 2 3

• 1. Table of Contents

• 2. BackCover

• 3. Security Technologies for the World Wide Web, Second Edition

• 4. Preface

  Overview References

• 5. Chapter 1: Introduction

  1.1Internet

• 6. 1.2 WWW

  1.2WWW

• 7. 1.3 Vulnerabilities, threats, and countermeasures

  1.3Vulnerabilities threats and countermeasures

• 8. 1.4 Generic security model

  1.4Generic security model 1.4.1Security policy 1.4.2 Host security 1.4.3Network security 1.4.4Organizational security 1.4.5Legal security

• 9. References

  References

• 10. Chapter 2: HTTP Security

  2.1HTTP

• 11. 2.2 User authentication, authorization, and access control In general, organizations run Web

  2.2User authentication authorization and access control In general organizations run Web

• 12. 2.3 Basic authentication

  2.3Basic authentication

• 13. 2.4 Digest access authentication

  2.4Digest access authentication

• 14. 2.5 Certificate-based authentication

  2.5Certificate-based authentication

• 15. 2.6 Server configuration

  2.6 Server configuration 2.6.1Configuring HTTP basic authentication 2.6.2Configuring HTTP digest access authentication

• 16. 2.7 Conclusions

  2.7Conclusions

• 17. References

  References

• 18. Chapter 3: Proxy Servers and Firewalls

  3.1Introduction

• 19. 3.2 Static packet filtering

  3.2Static packet filtering

• 20. 3.3 Dynamic packet filtering or stateful inspection

  3.3Dynamic packet filtering or stateful inspection

• 21. 3.4 Circuit-level gateways

  3.4Circuit-level gateways

• 22. 3.5 Application-level gateways

  3.5Application-level gateways

• 23. 3.6 Firewall configurations

  3.6Firewall configurations 3.6.1Dual-homed firewall 3.6.2Screened host firewall 3.6.3Screened subnet firewall

• 24. 3.7 Network address translation

  3.7Network address translation

• 25. 3.8 Configuring the browser

  3.8Configuring the browser

• 26. 3.9 Conclusions

  3.9Conclusions

• 27. References

  References

• 28. Chapter 4: Cryptographic Techniques

  4.1Introduction

• 29. 4.2 Cryptographic hash functions

  4.2Cryptographic hash functions

• 30. 4.3 Secret key cryptography

  4.3Secret key cryptography 4.3.1DES 4.3.2Triple-DES 4.3.3IDEA 4.3.4SAFER 4.3.5Blowfish 4.3.6CAST-128 4.3.7RC2 RC4 RC5 and RC6 4.3.8AES

• 31. 4.4 Public key cryptography

  4.4Public key cryptography 4.4.1RSA 4.4.2Diffie-Hellman 4.4.3ElGamal 4.4.4DSS 4.4.5ECC

• 32. 4.5 Digital envelopes

  4.5Digital envelopes

• 33. 4.6 Protection of cryptographic keys

  4.6Protection of cryptographic keys

• 34. 4.7 Generation of pseudorandom bit sequences

  4.7Generation of pseudorandom bit sequences

• 35. 4.8 Legal issues

  4.8Legal issues 4.8.1Patent claims 4.8.2Regulations 4.8.3Electronic and digital signature legislation

• 36. 4.9 Notation

  4.9Notation

• 37. References

  goldreich o. Foundations of Cryptography Basic Tools

• 38. Chapter 5: Internet Security Protocols

  5.1Introduction

• 39. 5.2 Network access layer security protocols

  5.2Network access layer security protocols 5.2.1Layer 2 Forwarding Protocol 5.2.2Point-to-Point Tunneling Protocol 5.2.3Layer 2 Tunneling Protocol 5.2.4Virtual private networking

• 40. 5.3 Internet layer security protocols

  5.3Internet layer security protocols 5.3.1IP security architecture 5.3.2IPsec protocols 5.3.3IKE Protocol 5.3.4Implementations

• 41. 5.4 Transport layer security protocols

  5.4Transport layer security protocols

• 42. 5.5 Application layer security protocols

  5.5Application layer security protocols 5.5.1Security-enhanced application protocols 5.5.2Authentication and key distribution systems 5.5.3Layering security protocols above the application layer

• 43. 5.6 Conclusions

  5.6Conclusions

• 44. References

  References

• 45. Chapter 6: SSL and TLS Protocols

  6.1SSL Protocol 6.1.1History 6.1.2Architecture 6.1.3SSL Record Protocol 6.1.4SSL Handshake Protocol 6.1.5Security analysis 6.1.6Implementations

• 46. 6.2 TLS Protocol

  6.2TLS Protocol

• 47. 6.3 SSL and TLS certificates

  6.3SSL and TLS certificates

• 48. 6.4 Firewall traversal

  6.4Firewall traversal 6.4.1SSLTLS tunneling 6.4.2SSLTLS proxy servers

• 49. 6.5 Conclusions

  6.5Conclusions

• 50. References

  References

1 2 3