WEB站点安全性研究

The Principle and Application of Secure Web Site

从单密钥加密、公用密钥加密、安全散列、数字签名等网络安全技术出发 ,讨论了网络通讯中的信息加密、信息完整性以及客户机服务器认证等技术知识 .并详细分析了SSL协议工作原理 .讨论了如何利用CA数字证书签发机构和SSL协议原理在Internet/Intranet中建立Web安全站点 .本文将以WindowsNT和UNIX环境为例 ,详细介绍安全Web站点的配置步骤 ,充分利用SSL的强大功能 ,以确保通信双方的信息安全性 .

Based on the Internet security technique, such as the Symmetric Key Encryption(SKE),the Public Key Encryption(PKE),the Secure Hash Functions(SHF), the Digital Signature ,and so on, this article argues some secure network transmission technology, including information encryption, information integrity and Client/Server Authentication. In addition, it demonstrates the working principle of SSL(Secure Socket Layer) protocol in details, and tells how to build secure web site on Internet/Intranet making use of CA Digital Certificate Signing Authority and SSL protocol. Combining the examples in Windows NT and UNIX environment, this article introduces configuration steps of the secure web site in long, using strong function of the SSL completely in order to insure the security of the two sides in transporting.