首页> 外文学位 >Secure sockets layer certificate vulnerabilities: An examination of challenges affecting authentication of secure websites.
【24h】

Secure sockets layer certificate vulnerabilities: An examination of challenges affecting authentication of secure websites.

机译:安全套接字层证书漏洞:检查影响安全网站身份验证的挑战。

获取原文
获取原文并翻译 | 示例

摘要

Internet users face significant risk to their private information from vulnerabilities associated with the use of Secure Socket Layer (SSL) certificates. Ubiquitous Web communications relies on this technology in order to transmit personal or sensitive data online. SSL certificates provide authentication, boost user confidence, and validate trusted links between Web browsers and Web servers. Unfortunately, SSL certificates are susceptible to compromise and constantly scrutinized to exploit their weaknesses. This study examined vulnerabilities surrounding the use of SSL certificates. When sensitive information is transferred via the Web, appropriate security techniques and protocols must be properly implemented in order to alleviate threats and ensure the Confidentiality, Integrity, and Authenticity (CIA) of both data and the connection. This study found that the key vulnerabilities of SSL certificates to authenticate Web exchanges involves third party Certificate Authorities during the certificate issuance, maintenance, and validation processes. The implicit trust that Web users have come to accept in these entities is in question.
机译:与使用安全套接字层(SSL)证书相关的漏洞使Internet用户面临着对其私人信息的巨大风险。无处不在的Web通信依靠此技术来在线传输个人或敏感数据。 SSL证书提供身份验证,增强用户信心并验证Web浏览器和Web服务器之间的可信链接。不幸的是,SSL证书容易受到威胁,并不断受到审查以利用其弱点。这项研究检查了与SSL证书使用有关的漏洞。通过Web传输敏感信息时,必须适当实施适当的安全技术和协议,以减轻威胁并确保数据和连接的机密性,完整性和真实性(CIA)。这项研究发现,SSL证书对Web交换进行身份验证的关键漏洞在证书颁发,维护和验证过程中涉及第三方证书颁发机构。 Web用户已在这些实体中接受的隐式信任值得怀疑。

著录项

  • 作者

    Anderson, David P.;

  • 作者单位

    Utica College.;

  • 授予单位 Utica College.;
  • 学科 Computer science.;Information technology.
  • 学位 M.S.
  • 年度 2013
  • 页码 71 p.
  • 总页数 71
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类
  • 关键词

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号