SSL and TLS
Theory and Practice, Second Edition
1st Edition
Published on 31. March 2016
304 pages
978-1-60807-999-5 (ISBN)
Description
This completely revised and expanded second edition of SSL and TLS: Theory and Practice provides an overview and a comprehensive discussion of the Secure Sockets Layer (SSL), Transport Layer Security (TLS), and Datagram TLS (DTLS) protocols that are omnipresent in today's e-commerce and e-business applications and respective security solutions. It provides complete details on the theory and practice of the protocols, offering readers a solid understanding of their design principles and modes of operation. Updates to this edition include coverage of the recent attacks against the protocols, newly specified extensions and firewall traversal, as well as recent developments related to public key certificates and respective infrastructures. This book targets software developers, security professionals, consultants, protocol designers, and chief security officers who will gain insight and perspective on the many details of the SSL, TLS, and DTLS protocols, such as cipher suites, certificate management, and alert messages. The book also comprehensively discusses the advantages and disadvantages of the protocols compared to other Internet security protocols and provides the details necessary to correctly implement the protocols while saving time on the security practitioner's side.
More details
Other editions
Additional editions
Rolf Oppliger
SSL and TLS: Theory and Practice, Second Edition
Book
03/2016
Artech House Publishers
Unfortunately, price unknown
Available (delivery time upon request)
Content
- SSL and TLS Theory and Practice Second Edition
- Contents
- Preface
- References
- Acknowledgments
- Chapter 1 Introduction
- 1.1 INFORMATION AND NETWORK SECURITY
- 1.1.1 Security Services
- 1.1.2 Security Mechanisms
- 1.2 TRANSPORT LAYER SECURITY
- 1.3 FINAL REMARKS
- References
- Chapter 2 SSL Protocol
- 2.1 INTRODUCTION
- 2.2 PROTOCOLS
- 2.2.1 SSL Record Protocol
- 2.2.2 SSL Handshake Protocol
- 2.2.3 SSL Change Cipher Spec Protocol
- 2.2.4 SSL Alert Protocol
- 2.2.5 SSL Application Data Protocol
- 2.3 PROTOCOL EXECUTION TRANSCRIPT
- 2.4 SECURITY ANALYSES AND ATTACKS
- 2.5 FINAL REMARKS
- References
- Chapter 3 TLS Protocol
- 3.1 INTRODUCTION
- 3.1.1 TLS PRF
- 3.1.2 Generation of KeyingMaterial
- 3.2 TLS 1.0
- 3.2.1 Cipher Suites
- 3.2.2 CertificateManagement
- 3.2.3 Alert Messages
- 3.2.4 Other Differences
- 3.3 TLS 1.1
- 3.3.1 Cryptographic Subtleties
- 3.3.2 Cipher Suites
- 3.3.3 CertificateManagement
- 3.3.4 Alert Messages
- 3.3.5 Other Differences
- 3.4 TLS 1.2
- 3.4.1 TLS Extensions
- 3.4.2 Cipher Suites
- 3.4.3 CertificateManagement
- 3.4.4 Alert Messages
- 3.4.5 Other Differences
- 3.5 TLS 1.3
- 3.5.1 Cipher Suites
- 3.5.2 CertificateManagement
- 3.5.3 Alert Messages
- 3.5.4 Other Differences
- 3.6 HSTS
- 3.7 PROTOCOL EXECUTION TRANSCRIPT
- 3.8 SECURITY ANALYSES AND ATTACKS
- 3.8.1 Renegotiation Attack
- 3.8.2 Compression-Related Attacks
- 3.8.3 More Recent Padding Oracle Attacks
- 3.8.4 Key Exchange Downgrade Attacks
- 3.8.5 FREAK
- 3.8.6 Logjam
- 3.9 FINAL REMARKS
- References
- Chapter 4 DTLS Protocol
- 4.1 INTRODUCTION
- 4.2 BASIC PROPERTIES AND DISTINGUISHING FEATURES
- 4.2.1 Record Protocol
- 4.2.2 Handshake Protocol
- 4.3 SECURITY ANALYSIS
- 4.4 FINAL REMARKS
- References
- Chapter 5 Firewall Traversal
- 5.1 INTRODUCTION
- 5.2 SSL/TLS TUNNELING
- 5.3 SSL/TLS PROXYING
- 5.4 FINAL REMARKS
- References
- Chapter 6 Public Key Certificates and Internet Public Key Infrastructure (PKI)
- 6.1 INTRODUCTION
- 6.2 X.509 CERTIFICATES
- 6.2.1 Certificate Format
- 6.2.2 Hierarchical Trust Model
- 6.3 SERVER CERTIFICATES
- 6.4 CLIENT CERTIFICATES
- 6.5 PROBLEMS AND PITFALLS
- 6.6 NEW APPROACHES
- 6.7 FINAL REMARKS
- References
- Chapter 7 Concluding Remarks
- References
- Appendix A Registered TLS Cipher Suites
- Appendix B Padding Oracle Attacks
- B.1 BLEICHENBACHER ATTACK
- B.2 VAUDENAY ATTACK
- References
- Appendix C Abbreviations and Acronyms
- About the Author
- Index
