計(jì)算機(jī)網(wǎng)絡(luò)8網(wǎng)絡(luò)安全-全文預(yù)覽
【正文】 支持 , 而且也是運(yùn)輸層安全協(xié)議 TLS (Transport Layer Security)的基礎(chǔ) 2022/2/5 36 2022/2/5 37 在發(fā)送方 , SSL 接收應(yīng)用層的數(shù)據(jù) (如 HTTP 或 IMAP 報(bào)文 ), 對(duì)數(shù)據(jù)進(jìn)行加密 , 然后把加了密的數(shù)據(jù)送往 TCP 套接字；在接收方 , SSL 從 TCP 套接字讀取數(shù)據(jù) , 解密后把數(shù)據(jù)交給應(yīng)用層 . ? SSL服務(wù)器鑒別 ? 允許用戶證實(shí)服務(wù)器的身份 . 具有 SSL功能的瀏覽器維持一個(gè)表 , 上面有一些可信賴的認(rèn)證中心 CA (Certificate Authority)和它們的公鑰 ? 加密的 SSL 會(huì)話 ? 客戶和服務(wù)器交互的所有數(shù)據(jù)都在發(fā)送方加密 , 在接收方解密 ? SSL 客戶鑒別 ? 允許服務(wù)器證實(shí)客戶的身份 2022/2/5 38 ? SET是專(zhuān)為與支付有關(guān)的報(bào)文進(jìn)行加密的 ? SET協(xié)議涉及到三方 , 即顧客、商家和商業(yè)銀行 ? 所有在這三方之間交互的敏感信息都被加密 ? SET要求這三方都有證書(shū) ? 在 SET 交易中 , 商家看不見(jiàn)顧客傳送給商業(yè)銀行的信用卡號(hào)碼 2022/2/5 39 ? 防火墻由軟件、硬件構(gòu)成 , 用于在兩個(gè)網(wǎng)絡(luò)之間實(shí)施接入控制 ? 防火墻功能 : 阻止或者允許 ? 兩類(lèi)防火墻 ? 包過(guò)濾防火墻 (網(wǎng)絡(luò)級(jí) ) ? 代理防火墻 (應(yīng)用級(jí) ) 2022/2/5 40 2022/2/5 41 包防火墻過(guò)濾位于網(wǎng)絡(luò)層或者傳輸層 . 2022/2/5 42 ? Internal work connected to Inter via router firewall ? Router filters packetbypacket, decision to forward/drop packet based on certain/configurable criteria 2022/2/5 43 Should arriving packet be allowed in? Departing packet let out? ? Discard packets based on configurable criteria ? Address filtering ? Based on source and/or destination address in IP packets ? Allowing packets with certain IP addresses to go through ? Blocking packets with certain IP addresses ? Traffic type filtering ? Based on the type of traffic in IP header (TCP/UDP port numbers) ? Allowing certain types to go through, (port 80) ? Content filtering ? Based on the content of packets. ? Blocking packets with some patterns in the content. ? Specific filtering: ICMP m
試題試卷相關(guān)推薦
鄂ICP備17016276號(hào)-1