|
TITLE
| | Web Security & Commerce
| | EDITION
| | 1st
| | ISBN
| | 1-56592-269-7
| | AUTHOR(S)
| | Eugene H. Spafford, Simson Garfinkel
| | PUBLISHER
| | O'Reilly & Associates, Inc.
| | PUBLISHED
| | 1997
| | LEVEL(S)
| | 3 and 4 [about levels]
| | This edition has been replaced
| | Order current edition from amazon.com
|
| SYNOPSIS |
Attacks on government Web sites, break-ins at Internet service providers, electronic credit card fraud, invasion of personal privacy by merchants as well as hackers--is this what the World Wide Web is really all about?
Web Security & Commerce cuts through the hype and the front page stories. It tells you what the real risks are and explains how you can minimize them. Whether you're a casual (but concerned) Web surfer or a system administrator responsible for the security of a critical Web server, this book will tell you what you need to know. Entertaining as well as illuminating, it looks behind the headlines at the technologies, risks, and benefits of the Web. Whatever browser or server you are using, you and your system will benefit from this book.
Topics include:
* User safety--browser vulnerabilities (with an emphasis on Netscape Navigator and Microsoft Internet Explorer), privacy concerns, issues with Java, JavaScript, ActiveX, and plug-ins.
* Digital certificates--what they are, how they assure identity in a networked environment, how certification authorities and server certificates work, and what code signing all about.
* Cryptography--an overview of how encryption works on the Internet and how different algorithms and programs are being used today.
* Web server security--detailed technical information about SSL (Secure Socket Layer), TLS (Transport Layer Security), host security, server access methods, and secure CGI/API programming.
* Commerce and society--how digital payments work, what blocking software and censorship technology (e.g., PICS and RSACi) is about, and what civil and criminal issues you need to understand.
ABOUT THE AUTHOR
| | Eugene H. Spafford | Eugene H. Spafford is on the faculty of the Department of Computer Sciences at Purdue University. He is the founder and director of the Computer Operations, Audit, and Security Technology (COAST) Laboratory at Purdue. Professor Spafford is an active researcher in the areas of software testing and debugging, applied security, and professional computing issues. He was a participant in the effort to bring the Internet worm under control; his published analyses of that incident are considered the definitive explanations. He is the coauthor of Practical UNIX & Internet Security (O'Reilly & Associates, 1996). He was the consulting editor for Computer Crime: A Crimefighters Handbook (O'Reilly & Associates, 1995), and has also coauthored a widely praised book on computer viruses. He supervised the development of the first COPS and Tripwire security audit software packages, and he has been a frequently invited speaker at computer ethics and computer security events around the world. He is on numerous editorial and advisory boards, and is active in many professional societies, including ACM, Usenix, IEEE (as a Senior Member), and the IEEE Computer Society. | | Simson Garfinkel | Simson Garfinkel is a journalist, entrepreneur, and international authority on computer security. Garfinkel is Chief Technology Officer at Sandstorm Enterprises, a Boston-based firm that develops state-of-the-art computer security tools. Garfinkel is also a columnist for Technology Review Magazine and has written for more than 50 publications, including Computerworld, Forbes, and The New York Times. He is also the author of Database Nation, PGP: Pretty Good Privacy, and eight other books.
Garfinkel earned a Master's degree in Journalism at Columbia University in 1988 and holds three undergraduate degrees from MIT. He is currently a working on his doctorate at MIT's Laboratory for Computer Science. |
|
