网络安全技术电信群楼3-509
网络安全技术 电信群楼3-509 1
Secure Socket LayerSSLandIPSec2
SSL and IPSec 2 Secure Socket Layer
Socket layer"Socket layer"Userlives betweenapplicationSocketapplication and"layer"transporttransportOslayersnetworkSSL usuallylies betweenlinkNICHTTP and TCPphysicalSSL and IPSec3
SSL and IPSec 3 Socket layer ◼ “Socket layer” lives between application and transport layers ◼ SSL usually lies between HTTP and TCP application transport network link physical Socket “layer” OS User NIC
What is SSL?SsL is the protocol used for most secure transactionsoverthe Internet You wantto be sure that you are dealing with Amazon (onewayauthentication Your credit card information must be protectedin transit(data confidentiality) As long as you have money,Amazon doesn't care who youare (authenticationneed nottobemutual)SSLandIPSec4
SSL and IPSec 4 What is SSL? ◼ SSL is the protocol used for most secure transactions over the Internet ❑ You want to be sure that you are dealing with Amazon (oneway authentication) ❑ Your credit card information must be protected in transit (data confidentiality) ❑ As long as you have money, Amazon doesn’t care who you are (authentication need not to be mutual)
Simple SSL-like ProtocolI'd like to talk to you securelyCertB(KAB)BobBobencrypted HTTP usingAliceRIs Alice sure she's talking to Bob?Achieve Data Confentiality?Forward secrecy?SSLandIPSec5
SSL and IPSec 5 Simple SSL-like Protocol Alice Bob I’d like to talk to you securely CertB {KAB}Bob encrypted HTTP using KAB ◼ Is Alice sure she’s talking to Bob? ◼ Achieve Data Confentiality? ◼ Forward secrecy?