Table of Contents

• Acknowledgments.
• 1. Introduction.
• I. CRYPTOGRAPHY.
• 2. Introduction to Cryptography.
• 3. Secret Key Cryptography.
• 4. Modes of Operation.
• 5. Hashes and Message Digests.
• 6. Public Key Algorithms.
• 7. Number Theory.
• 8. Math with AES and Elliptic Curves.
• II. AUTHENTICATION.
• 9. Overview of Authentication Systems.
• 10. Authentication of People.
• 11. Security Handshake Pitfalls.
• 12. Strong Password Protocols.
• III. STANDARDS.
• 13. Kerberos V4.
• 14. Kerberos V5.
• 15. PKI (Public Key Infrastructure).
• 16. Real-time Communication Security.
• 17. IPsec: AH and ESP.
• 18. IPsec: IKE.
• 19. SSL/TLS.
• IV. ELECTRONIC MAIL.
• 20. Electronic Mail Security.
• 21. PEM & S/MIME.
• 22. PGP (Pretty Good Privacy).
• V. LEFTOVERS.
• 23. Firewalls.
• 24. More Security Systems.
• 25. Web Issues.
• 26. Folklore.
• Bibliography.
• Glossary.
• Index.
  

Promotional Information

The world's #1 book on network and Internet security has been thoroughly updated to reflect today's latest threats, techniques, and technologies. The long-awaited Network Security, Second Edition brings together definitive, accessible, even entertaining explanations of every key facet of information security. The authors begin by reviewing the challenges of network security, and introducing basic concepts such as authorization and the "military model" of security. They present an easy-to-understand introduction to cryptography, including secret and public keys, hashes, and message digests. A detailed section on authentication addresses the challenge of proving identity across the network; handshakes; and common attacks that must be addressed in designing authentication systems. The authors address core Internet security standards including Kerberos 4/5, PKI, IPSec, and SSL; as well as e-mail security via PEM, S/MIME, and PGP. They offer practical introductions to the Web security issues associated with URLs, HTTP, HTML, and cookies; concluding with overviews of security in environments ranging from Windows to NetWare.

About the Author

CHARLIE KAUFMAN is a Distinguished Engineer at IBM, where he is Chief Security Architect for Lotus Notes and Domino. Previously, he was the Network Security Architect at Digital Equipment Corporation. He chaired the IETF's Web Transaction Security working group and currently serves on the IAB, the IETF's architecture board.

RADIA PERLMAN, Distinguished Engineer at Sun Microsystems, is known worldwide for her contributions to bridging (spanning tree algorithm) and routing (link state routing) as well as security (sabotage-proof networks). Perlman is the author of Interconnections: Bridges, Routers, Switches, and Internetworking Protocols, and she is one of the 25 people whose work has most influenced the networking industry, according to Data Communications magazine.

MIKE SPECINER is a Senior Consulting Engineer at ThinkEngine Networks and is a recognized expert in mathematical algorithms and operating systems.

Combined, this author team holds close to 100 patents.