Rhee M.Y. Internet Security. Cryptographic Principles, Algorithms and Protocols

San Francisco: Wiley, 2003. — 426 p. — ISBN: 0-470-85285-2Язык: English
Knowledge of number theory and abstract algebra are pre-requisites for any engineer designing a secure internet-based system.
However, most of the books currently available on the subject are aimed at practitioners who just want to know how the various tools available on the market work and what level of security they impart. These books traditionally deal with the science and mathematics only in so far as they are necessary to understand how the tools work.
Internet Security differs by its assertion that cryptography is the single most important technology for securing the Internet. To quote one reviewer "if every one of your communication partners were using a secure system based on encryption, viruses, worms and hackers would have a very hard time". This scenario does not reflect the reality of the Internet world as it currently stands. However, with security issues becoming more and more important internationally, engineers of the future will be required to design tougher, safer systems.
Internet Security:
The Internet is global in scope, but this global internetwork is an open insecure medium. The Internet has revolutionised the computing and communications world for the purpose of development and support of client and server services. The availability of the Internet, along with powerful affordable computing and communications, has made possible a new paradigm of commercial world. This has been tremendously accelerated by the adoption of browsers and World Wide Web technology, allowing users easy access to information linked throughout the globe. The Internet has truly proven to be an essential vehicle of information trade today.
The Internet is today a widespread information infrastructure, a mechanism for information dissemination, and a medium for collaboration and interaction between individuals, government agencies, financial institutions, academic circles and businesses of all sizes, without regard for geographic location.
People have become increasingly dependent on the Internet for personal and professional use regardless of whether it is for e-mail, file transfer, remote login, Web page access or commercial transactions. With the increased awareness and popularity of the Internet, Internet security problems have been brought to the fore. Internet security is not only extremely important, but more technically complex than in the past. The mere fact that business is being performed online over an insecure medium is enough to entice criminal activity to the Internet.
The Internet access often creates a threat as a security flaw. To protect users from Internetbased attacks and to provide adequate solutions when security is imposed, cryptographic techniques must be employed to solve these problems. This book is designed to reflect the central role of cryptographic operations, principles, algorithms and protocols in Internet security. The remedy for all kinds of threats created by criminal activities should rely on cryptographic resolution. Authentication, message integrity and encryption are very important in cultivating, improving, and promoting Internet security.Without such authentication procedures, an attacker could impersonate anyone and then gain access to the network. Message integrity is required because data may be altered as it travels through the Internet. Without confidentiality by encryption, information may become truly public.Internetworking and Layered Models
TCP/IP Suite and Internet Stack Protocols
Symmetric Block Ciphers
Hash Function, Message Digest and Message Authentication Code
Asymmetric Public-key Cryptosystems
Public-key Infrastructure
Network Layer Security
Transport Layer Security: SSLv3 and TLSv1
Electronic Mail Security: PGP, S/MIME
Internet Firewalls for Trusted Systems
SET for E-commerce Transactions