Network security using OpenSSL - cryptography for secure communications
Network security using OpenSSL - cryptography for secure communications
复制标题
DOI：
--
复制
发表时间：
2002-06
期刊：
影响因子：
--
通讯作者：
J. Viega;M. Messier;Pravir Chandra
中科院分区：
文献类型：
--
作者：
J. Viega;M. Messier;Pravir Chandra
现在的大多数应用程序至少在某种程度上是网络感知的，但是如何保护这些应用程序免受常见的网络安全威胁呢？OpenSSL是SSL/TLS的开源版本，是安全网络通信中使用最广泛的协议。OpenSSL库被广泛用于需要加密功能来保护广泛敏感信息（如信用卡号码和其他金融交易）的网站。该库是C和C++中唯一的免费、功能齐全的SSL实现，它可以通过编程或命令行使用，以保护大多数基于TCP的网络协议。OpenSSL的网络安全使开发人员能够更有效地使用此协议。传统上，在OpenSSL中完成一些简单的事情很容易需要几周时间。这本简明的书给了你避免陷阱所需的指导，同时让你利用图书馆？的先进功能。而且，这本书并没有让你陷入SSL如何在引擎盖下工作的技术细节，而是只提供了安全有效地使用OpenSSL所必需的信息。本书以循序渐进的方式详细介绍了保护网络通信的挑战，并向您展示了如何使用OpenSSL工具来最好地应对这些挑战。作为系统或网络管理员，您将受益于OpenSSL命令行界面的全面处理，以及获取证书和设置自己的证书颁发机构的分步指导。作为开发人员，您将进一步受益于深入的讨论和如何在自己的程序中使用OpenSSL的示例。虽然OpenSSL是用C语言编写的，但也包括了如何在Perl、Python和PHP中使用OpenSSL的信息。OpenSSL可以很好地满足您保护敏感数据的需求。如果那样呢？在这种情况下，OpenSSL的网络安全是唯一可用的指南。
Most applications these days are at least somewhat network aware, but how do you protect those applications against common network security threats? Many developers are turning to OpenSSL, an open source version of SSL/TLS, which is the most widely used protocol for secure network communications.The OpenSSL library is seeing widespread adoption for web sites that require cryptographic functions to protect a broad range of sensitive information, such as credit card numbers and other financial transactions. The library is the only free, full-featured SSL implementation for C and C++, and it can be used programmatically or from the command line to secure most TCP-based network protocols.Network Security with OpenSSL enables developers to use this protocol much more effectively. Traditionally, getting something simple done in OpenSSL could easily take weeks. This concise book gives you the guidance you need to avoid pitfalls, while allowing you to take advantage of the library?s advanced features. And, instead of bogging you down in the technical details of how SSL works under the hood, this book provides only the information that is necessary to use OpenSSL safely and effectively. In step-by-step fashion, the book details the challenges in securing network communications, and shows you how to use OpenSSL tools to best meet those challenges.As a system or network administrator, you will benefit from the thorough treatment of the OpenSSL command-line interface, as well as from stepby-step directions for obtaining certificates and setting up your own certification authority. As a developer, you will further benefit from the in-depth discussions and examples of how to use OpenSSL in your own programs. Although OpenSSL is written in C, information on how to use OpenSSL with Perl, Python and PHP is also included.OpenSSL may well answer your need to protect sensitive data. If that?s the case, Network Security with OpenSSL is the only guide available on the subject.