SECURITY TECHNOLOGIES FOR THE WORLD WIDE WEB

By JOSHUA LEWIS

CONTENTS INTRODUCTION INTERNET WWW VULNERABILITIES, THREATS, AND COUNTERMEASURES GENERIC SECURITY MODEL SECURITY POLICY HOST SECURITY NETWORK SECURITY ORGANIZATIONAL SECURITY LEGAL SECURITY REFERENCES HTTP SECURITY HTTP USER AUTHENTICATION, AUTHORIZATION, AND ACCESS CONTROL BASIC AUTHENTICATION DIGEST ACCESS AUTHENTICATION CERTI?CATE-BASED AUTHENTICATION SERVER CON?GURATION CON?GURING HTTP BASIC AUTHENTICATION CON?GURING HTTP DIGEST ACCESS AUTHENTICATION CONCLUSIONS PROXY SERVERS AND FIREWALLS STATIC PACKET ?LTERING DYNAMIC PACKET ?LTERING OR STATEFUL INSPECTION CIRCUIT-LEVEL GATEWAYS APPLICATION-LEVEL GATEWAYS FIREWALL CON?GURATIONS DUAL-HOMED ?REWALL SCREENED HOST ?REWALL SCREENED SUBNET ?REWALL NETWORK ADDRESS TRANSLATION CON?GURING THE BROWSER CRYPTOGRAPHIC TECHNIQUES CRYPTOGRAPHIC HASH FUNCTIONS SECRET KEY CRYPTOGRAPHY DES TRIPLE-DES IDEA SAFER BLOW?SH CAST-128 RC2, RC4, RC5, AND RC6 AES PUBLIC KEY CRYPTOGRAPHY RSA DIF?E-HELLMAN ELGAMAL DSS ECC DIGITAL ENVELOPES PROTECTION OF CRYPTOGRAPHIC KEYS GENERATION OF PSEUDORANDOM BIT SEQUENCES LEGAL ISSUES PATENT CLAIMS REGULATIONS ELECTRONIC AND DIGITAL SIGNATURE LEGISLATION NOTATION INTERNET SECURITY PROTOCOLS NETWORK ACCESS LAYER SECURITY PROTOCOLS LAYER 2 FORWARDING PROTOCOL POINT-TO-POINT TUNNELING PROTOCOL LAYER 2 TUNNELING PROTOCOL VIRTUAL PRIVATE NETWORKING INTERNET LAYER SECURITY PROTOCOLS IP SECURITY ARCHITECTURE IPSEC PROTOCOLS IKE PROTOCOL IMPLEMENTATIONS TRANSPORT LAYER SECURITY PROTOCOLS APPLICATION LAYER SECURITY PROTOCOLS SECURITY-ENHANCED APPLICATION PROTOCOLS AUTHENTICATION AND KEY DISTRIBUTION SYSTEMS LAYERING SECURITY PROTOCOLS ABOVE THE APPLICATION LAYER SSL AND TLS PROTOCOLS SSL PROTOCOL HISTORY ARCHITECTURE SSL RECORD PROTOCOL SSL HANDSHAKE PROTOCOL SECURITY ANALYSIS TLS PROTOCOL SSL AND TLS CERTI?CATES FIREWALL TRAVERSAL SSL/TLS TUNNELING SSL/TLS PROXY SERVERS CERTI?CATE MANAGEMENT AND PUBLIC KEY INFRASTRUCTURES PUBLIC KEY CERTI?CATES PGP CERTI?CATES X509 CERTI?CATES IETF PKIX WG CERTI?CATE REVOCATION CRLS OCSP ALTERNATIVE SCHEMES CERTI?CATES FOR THE WWW CA CERTI?CATES SERVER OR SITE CERTI?CATES PERSONAL CERTI?CATES SOFTWARE PUBLISHER CERTI?CATES AUTHENTICATION AND AUTHORIZATION INFRASTRUCTURES MICROSOFT NET PASSPORT OVERVIEW NET PASSPORT USER ACCOUNTS NET PASSPORT SSI SERVICE COMPLEMENTARY SERVICES KERBEROS-BASED AAIS KERBEROS SESAME WINDOWS 2000 PKI-BASED AAIS ELECTRONIC PAYMENT SYSTEMS ELECTRONIC CASH SYSTEMS ELECTRONIC CHECKS ELECTRONIC CREDIT-CARD PAYMENTS MICROPAYMENT SYSTEMS CLIENT-SIDE SECURITY BINARY MAIL ATTACHMENTS HELPER APPLICATIONS AND PLUG-INS SCRIPTING LANGUAGES JAVA APPLETS SECURITY ARCHITECTURE CODE SIGNING ACTIVEX CONTROLS SECURITY ZONES IMPLICATIONS FOR ?REWALLS SERVER-SIDE SECURITY CGI SERVER APIS FASTCGI SERVER-SIDE INCLUDES ASP JSP PRIVACY PROTECTION AND ANONYMITY SERVICES EARLY WORK COOKIES ANONYMOUS BROWSING ANONYMIZING HTTP PROXY SERVERS JAP CROWDS ONION ROUTING FREEDOM NETWORK ANONYMOUS PUBLISHING JANUS AND THE REWEBBER SERVICE TAZ SERVERS AND THE REWEBBER NETWORK PUBLIUS VOLUNTARY PRIVACY STANDARDS PRIVACY SEALS P3P INTELLECTUAL PROPERTY PROTECTION USAGE CONTROL DIGITAL COPYRIGHT LABELING CATEGORIES OF WATERMARKING TECHNIQUES ATTACKS DIGITAL MILLINIUM COPYRIGHT ACT CENSORSHIP ON THE WWW CONTENT BLOCKING IP ADDRESS BLOCKING URL BLOCKING CONTENT RATING AND SELF-DETERMINATION