ebook 145-6

Size: px

Start display at page:

Download "ebook 145-6"

怠鞠
7 years ago
Views:

1 6 6.1 Jim Lockhart Windows C S D Wo r m. E x p l o r e Z i p z i p p e d _ f i l e s. e x e Wo r m. E x p l o r e Z i p H i Recipient Name! I received your and I shall send you a reply ASAP. Till then take a look at the attached zipped docs. Bye. Secure Socket Layer, SSL H T T P

2 D A Eugene Spaff o r d Purdue University Perspective

3 C E R I A S W P O I TA A I S P I P

4 A R I S A R I S M u s i C o d e A R I S S o n i C o d e S o n i C o d D i g i m a r c W W W S o f t L o c k W W W S o f t L o c k 6-2 S o f t L o c k 6-2 SoftLock 6.4 P C 5

5 1 3 6 W W W J a v a J a v a S c r i p t Active X W W W 5 C o o k i e C o o k i e C o o k i e C o o k i e C o o k i e N a v i g a t o r Internet Explorer 1.

6 6 137 Ve r i S i g n Ve r i S i g 6-3 Ve r i S i g n 6-3 VeriSign Ve r i S i g n Ve r i S i g n 6-4 Ve r i S i g n Internet Explore N a v i g a t o r 2. Internet Explorer Internet Explorer Internet Active X J a v a Internet Explorer A u t h e n t i c o d e

7 VeriSign A u t h e n t i c o d e Active X A u t h e n t i c o d e A u t h e n t i c o d e X Y Z Internet Explorer A u t h e n t i c o d e X Y Z J a v a Active X A u t h e n t i c o d e A u t h e n t i c o d e Internet Explorer A u t h e n t i c o d e 6-5 A u t h e n t i c o d e 6-5

8 6 139 Ve r i S i g n Microsoft Internet Explorer 5 Power Tweaks Web Accessory Internet Explorer Internet Explorer Internet Explorer C o n n e c t i o n s Custom Level 6-6 Internet Explorer 6-6 Internet Explorer 6-1

9 Internet Explorer C o o k i e Active X Active X A u t h e n t i c o d e / A u t h e n t i c o d e A u t h e n t i c o d e C E RT 5 3. N a v i g a t o r N a v i g a t o r N a v i g a t o r J a v a J a v a S c r i p t Active X N a v i g a t o r P r e f e r e n c e s E d i t P r e f e r e n c e s P r e f e r e n c e s A d v a n c e d 6-7 J a v a J a v a S c r i p t c o o k i e c o o k i e c o o k i c o o k i e cookie c o o k i e Java JavaScript cookie c o o k i e 6-7 Navigator cookie J a v a J a v a S c r i p t N a v i g a t o r

10 H e a d s p a c e B e a t n i k N a v i g a t o r Navigator D e t a i l s G r a n t D e n y J a v a J a v a S c r i p t C e r t i f i c a t e B e a t n i k H e a d s p a c e 6-8 Navigator Java CA 6-9 Certificate Fingerprint /

11 cookie c o o k i e c o o k i e c o o k i e c o o k i c o o k i e c o o k i e c o o k i e c o o k i e c o o k i e c o o k i c o o k i e Internet Explorer 5 c o o k i e To o l s Internet Options S e c u r i t y Custom Level S e t t i n g s Cookie group c o o k i e c o o k i c o o k i e c o o k i E n a b l e D i s a b l e P r o m p t c o o k i e c o o k i e N a v i g a t o r P r e f e r e n c e s c o o k i e P C Newhouse News Service Joseph Schorr Data Discovery

12 c r y p t o g r a p h y K r u p t o g r a f h / /, Freedom Forum Online e n c r y p t i o n

13 Ronald Rivest Adi Shamir Leonard Adleman R S A H e r b A l l i s o n N 1 / 2 N 2 D E S D E S Electronic Frontier Foundations Deep Crack P C 23 D E S Cranking the 56-bit DES system N 6. 6

14 6 145 / / a 6-10 b c Herb ( ) Allison ( ) Herb ( ) Allison ( ) Allison ( ) Allison ( ) a) b) c) 6-2

15 Bruce Schneier D E S 70 E C C I D E A L U C M D 2 R S A M D R S A M D R S A R C 2 R S A R C 4 R C 5 R C 6 R S A R S A S H A 1 S H A 160 S k i p j a c k Triple DES C P U M D 2 M D 4 M D 5 M D 2 M D 5 4. S S L S - H T T P C o m m e r c e N e t S S L S - H T T P W W W S S L S - H T T P S S L S - H T T P S S L S - H T T P S H L I n t e r n e t S - H T T P S S L

16 6 147 S S L H T T P H T T P U R L H T T P S S L S S L S S L I n t e r n e t T C P / I P H T T S S L S S L F T P S S L Te l n e t S S L H T T P H T T P S U R L H T T P S U R L h t t p s :// w w w. a m a z o n. c o m A m a z o n. c o m S S L Internet Explorer N e t s c a p e S S L S S L S S w w w. g a t e w a y. c o m S S L S S L D E S Tr i p l e D E S R S A

17 SSL ( ) SSL SSL N e t c r a f t Web Server Survey S S L 3 N e t c r a f t N e t c r a f U R L N e t c r a f t W W W S S L S S L S S W W W W h a t s that SSL site running U R L E x a m i n e S S L Netcraft Web server S S L S u n S S L What does it all mean S S L Netcraft Secure Server Survey 1, H T T P S - H T T P H T T P S - H T T P H T T P / CommerceNet Consortium

18 6 149 W W W I n t e r n e t R S A S - H T T P S - H T T P R e q u i r e d O p t i o n R e f u s e d SSL S - H T T P S S L S - H T T P S S L

19 1 5 0 S - H T T P S - H T T P U N I X Ronald Rivest M D 5

20 6 151 / J a v a W W W T C P / I P T C P T C T C P / I P T C P / I

21 1 5 2 T C P / I P T C P / I P T C P / I P 6.7 W W W H T T P C G I W W W F T P W W W F T P W W W W W W Te l n e t E * Tr a d e

22 6 153 W W W U N I X / U N I X / 6-14 / c o o k i e / c o o k i e c o o k i e c o o k i e 6-14 / W W W W W W W W W /

23 / W W W U N I X W W W U N I X U N I X A I X I r i x L i n u x H P - U X S C O S o l a r i s S u n O S U l t r i x U N I X AT & T 1969 U N I X / U N I X U N I X Windows H T T P F T P Te l n e t O S I 2 U N I X

24 6 155 Te l n e t F T P H T T P I P F T P F T network 6-15 F i r e Wa l l - 1 Check Point Software Te c h n o l o g i e s 6-15 Check Point Software Technologies FireWall

25 S S L H T T P S - H T T P / access control list, ACL asymmetric encryption certification authority, C A clear text cipher text c o l l i s i o n computer forensics computer forensics Ex p e r t s C r y p t o g r a p h y Data Encryption Standard, DES d e c r y p t e d decryption program digital certificate digital signature e n c r y p t i o n encryption algorithm encryption program f i r e w a l l gateway server hash algorithm hash coding hash value integrity violation k e y message digest packet filter firewall private key

26 6 157 private-key encryption proxy servers public key public-key encryption secure envelope session key signed code signed message symmetric encryption trusted network untrusted network Ve r i S i g n B A C B Z A C A D B Z B Mjqqt Hfjxfw. Mtb nx dtzw hnvmjw? Xyfd fbfd kwtr ymj Xjsfyj ytifd. n n < Ve r i S i g n Ve r i S i g Andrea Flemington S S L

27 1 5 8 w w w. a m a z o n. c o m w w w. b e y o n d. c o m w w w. f e d e x. c o m w w w. g a t e w a y. c o m 11 5 H T T P S S S L S u n Netscape Enterprise 3.0 R C 4 + M D Ve r i S i g n R C 2 + M D 5 D E S + M D 5 Triple DES H T T P W W W F T P 21 S M T P 25 Te l n e t 23 S S L H T P P S U R L

強化信用卡電子交易安全之研究

強化信用卡電子交易安全之研究 a b c / (Electronic Data Interchange) (1) a b c 1 2 (2) ) 2001-03-09 (FBI) Windows NT 100 2001-03-10. Metromedia John Kluge (ID) Abraham 32 Abdallah 47 Michael Puglisi 2003-02-20 800 2003-03-07 2002 817