Web Security, Privacy, & Commerce 2nd Edition

Description

Since the first edition of this classic reference was published, World Wide Web use has exploded and e-commerce has become a daily part of business and personal life. As Web use has grown, so have the threats to our security and privacy--from credit card fraud to routine invasions of privacy by marketers to web site defacements to attacks that shut down popular web sites.

Web Security, Privacy & Commerce goes behind the headlines, examines the major security risks facing us today, and explains how we can minimize them. It describes risks for Windows and Unix, Microsoft Internet Explorer and Netscape Navigator, and a wide range of current programs and products. In vast detail, the book covers:

Nearly double the size of the first edition, this completely updated volume is destined to be the definitive reference on Web security risks and the techniques and technologies you can use to protect your privacy, your organization, your system, and your network.

FEATURES:

In vast detail, the book covers:

* Web technology--The technological underpinnings of the modern Internet and the cryptographic foundations of e-commerce are discussed, along with SSL (the Secure Sockets Layer), the significance of the PKI (Public Key Infrastructure), and digital identification, including passwords, digital signatures, and biometrics.

* Web privacy and security for users--Learn the real risks to user privacy, including cookies, log files, identity theft, spam, web logs, and web bugs, and the most common risk, users' own willingness to provide e-commerce sites with personal information. Hostile mobile code in plug-ins, ActiveX controls, Java applets, and JavaScript, Flash, and Shockwave programs are also covered.

* Web server security--Administrators and service providers discover how to secure their systems and web services. Topics include CGI, PHP, SSL certificates, law enforcement issues, and more.

* Web content security--Zero in on web publishing issues for content providers, including intellectual property, copyright and trademark issues, P3P and privacy policies, digital payments, client-side digital signatures, code signing, pornography filtering and PICS, and other controls on web content.

Nearly double the size of the first edition, this completely updated volume is destined to be the definitive reference on Web security risks and the techniques and technologies you can use to protect your privacy, your organization, your system, and your network.

CONTENTS:

PrefaceWeb Technology
* Chapter 1: The Web Security Landscape
* Chapter 2: The Architecture of the World Wide Web
* Chapter 3: Cryptography Basics
* Chapter 4: Cryptography and the Web
* Chapter 5: Understanding SSL and TLS
* Chapter 6: Digital Identification I: Passwords, Biometrics, and Digital Signatures
* Chapter 7: Digital Identification II: Digital Certificates, CAs, and PKIPrivacy and Security for Users
* Chapter 8: The Web’s War on Your Privacy
* Chapter 9: Privacy-Protecting Techniques
* Chapter 10: Privacy-Protecting Technologies
* Chapter 11: Backups and Antitheft
* Chapter 12: Mobile Code I: Plug-Ins, ActiveX,and Visual Basic
* Chapter 13: Mobile Code II: Java, JavaScript, Flash, and ShockwaveWeb Server Security
* Chapter 14: Physical Security for Servers
* Chapter 15: Host Security for Servers
* Chapter 16: Securing Web Applications
* Chapter 17: Deploying SSL Server Certificates
* Chapter 18: Securing Your Web Service
* Chapter 19: Computer CrimeSecurity for Content Providers
* Chapter 20: Controlling Access to Your Web Content
* Chapter 21: Client-Side Digital Certificates
* Chapter 22: Code Signing and Microsoft’s Authenticode
* Chapter 23: Pornography, Filtering Software, and Censorship
* Chapter 24: Privacy Policies, Legislation, and P3P
* Chapter 25: Digital Payments
* Chapter 26: Intellectual Property and Actionable ContentAppendixes
* Lessons from Vineyard.NET
* The SSL/TLS Protocol
* P3P: The Platform for Privacy Preferences Project
* The PICS Specification
* ReferencesColophon