Ольга Полянская - Инфраструктуры открытых ключей

• Название: Инфраструктуры открытых ключей
• Автор: Ольга Полянская
• Издательство: Интернет-университет информационных технологий - ИНТУИТ.ру
• Жанр: Прочая околокомпьтерная литература
• Год: 2007
• ISBN: 978-5-9556-0081-9

В курс включены сведения, необходимые специалистам в области информационной безопасности. Рассматривается технология инфраструктур открытых ключей (Public Key Infrastructure – PKI), которая позволяет использовать сервисы шифрования и цифровой подписи согласованно с широким кругом приложений, функционирующих в среде открытых ключей. Технология PKI считается единственной, позволяющей применять методы подтверждения цифровой идентичности при работе в открытых сетях.

Курс дает представление об основных концепциях и подходах к реализации инфраструктур открытых ключей, в нем описываются политика безопасности, архитектура, структуры данных, компоненты и сервисы PKI. Предлагается классификация стандартов и спецификаций в области инфраструктур открытых ключей. Подробно рассматриваются процессы проектирования инфраструктуры и подготовки ее к работе, обсуждаются типовые сценарии использования и способы реагирования на инциденты во время функционирования PKI.

---

94. , OASIS PKI Resources,

95. , OASIS Security Services (Security Assertion Markup Language - SAML) TC,

96. Olnes J., Verdier M., Ganivet N., Maillot D., Skretting J, Public Key Infrastructure and Certification Policy for Interdomain Management,

97. Perlman Radia, An Overview of PKI Trust Models,

98. , PGP User's Guide, Volume I: Essential Topics,

99. , PKI Interoperability Framework. PKI Forum White Paper,

100. Polk W.T., Hastings N.E., Malpani A, Public Key Infrastructures that Satisfy Security Goals,

101. Polk W.T., Hastings N.E, Bridge Certification Authorities: Connecting B2B Public Key Infrastructures, NIST,

102. , Public-Key Cryptography Standards, RSA Laboratories,

103. , Public Key Infrastructure. Request For Proposal. Object Management Group Document: ec/99-01-15,

104. , Public Key Infrastructure Standards,

105. Raina K, PKI Security Solutions for Enterprise: Solving HIPAA, E-Paper Act, and Other Compliance Issues, Wiley Publishing, Inc., 2003

106. Reese A, The Architecture of Privacy, 2004

107. , Request for Proposals for Certification Authority and Public Key Infrastructure Services, Office of the Secretary of Kansas State. Draft copy, 2001

108. , Secure Network Time Protocol (stime),

109. , Secure Socket Layer (SSL) 3.0 Specification,

110. , Securities Industry Root. Certificate Authority (SIRCA),

111. , Security Assertion Markup Language (SAML),

112. , Security Service API: Cryptographic API Recommendation Second Edition, NSA Cross Organization CAPI Team July 1, 1996

113. , SET Secure Electronic Transaction Specification. Book 1: Business Description, May 31, 1997

114. , SET Secure Electronic Transaction Specification. Book 2: Programmer's Guide,

115. , SET Secure Electronic Transaction. Specification. Book 3: Formal Protocol Definition, May 31, 1997

116. Slagell A.J, Bonilla R, PKI Scalability Issues,

117. , Standard for Entity Authentication Using Public Key Cryptography, FIPS 196 - Federal Information Processing Standard Publication 196, 1997

118. Stapleton J, CA Trust, A PKI Forum Note, July 2001

119. , Synopsis of PKI and Related Standards, The Center For Information Technology Stan-dards, 2000

120. , Time Signing, Symmetricom Trusted Time,

121. Turnbull J, Cross-Certification and PKI Policy Networking August 2000 Version: 1.0,

122. , Understanding Public Key Infrastructure (PKI), Technology White Paper, PKI WP 0999, RSA Security Inc., 1999

123. , What Are CA Certificates?,

124. , What is meant by trust?,

125. , WHAT IS SESAME?,

126. , X.500: Directory Access Protocol (DAP),

127. , X.500 Directories Part 2-Core Directory Information Tree and Schema Guideline,

128. , X.509 Certificate Policy. for the. E-Governance Certification Authorities, Version 1.3 9 November 2005

129. , XML Key Management Specification (XKMS 2.0),

130. , RFC 822 Standard for the format of ARPA Internet text messages,

131. , RFC 959 File Transfer Protocol,

132. , RFC 1034 Domain names - concepts and facilities,

133. , RFC 1035 Domain names - implementation and specification,

134. , RFC 1305 Network Time Protocol (Version 3) Specification, Implementation and Analysis,

135. , RFC 1510 The Kerberos Network Authentication Service (V5),

136. , RFC 1760 The S/Key One-Time Password System,

137. , RFC 1991 PGP Message Exchange Formats,

138. , RFC 2015 PGP MIME Security with Pretty Good Privacy,

139. , RFC 2025 Simple Public Key GSS-API Mechanism (SPKM),

140. , RFC 2068 Hypertext Transfer Protocol - HTTP/1.1,

141. , RFC 2116 X.500 Implementations Catalog-96,

142. , RFC 2246 The TLS Protocol Version 1.0,

143. , RFC 2401 Security Architecture for the Internet Protocol,

144. , RFC 2402 IP Authentication Header,

145. , RFC 2406 IP Encapsulating Security Payload (ESP),

146. , RFC 2408 Internet Security Association and Key Management Protocol,

147. , RFC 2409 The Internet Key Exchange (IKE),

148. , RFC 2412 The OAKLEY Key Determination Protocol,

149. , RFC 2440 Open PGP Message Format,

150. , RFC 2510 Certificate Management Protocols (CMP),

151. , RFC2511 Certificate Request Protocol,

152. , RFC2527 Certificate Policy and Certification Practices Framework,

153. , RFC 2538 Storing Certificates in the Domain Name System (DNS),

154. , RFC2559 LDAP V2 Operational Protocols,

155. , RFC2560 Online Certificate Status Protocol (OCSP),

156. , RFC2585 HTTP/FTP Operations,

157. , RFC2587 LDAP V2 Schema,

158. , RFC 2632 S/MIME Version 3 Certificate Handling,

159. , RFC 2633 S/MIME Version 3 Message Specification,

160. , RFC2797 Certificate Management Messages over CMS (CMC),

161. , RFC 2849 The LDAP Data Interchange Format (LDIF),

162. , RFC2875 Diffie-Hellman Proof-of-Possession (POP) Algorithms,

163. , RFC 3029 Data Validation and Certification Server Protocols,

164. , RFC 3039 Qualified Certificates Profile,

165. , RFC 3161 Time-Stamp Protocol (TSP),

166. , RFC 3279 Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile,

167. , RFC 3280 Certificate & CRL Profile,

168. , RFC 3281 An Internet Attribute Certificate Profile for Authorization,

169. , RFC 2311 S/MIME Version 2 Message Specification,

170. , RFC 2312 S/MIMEv2 Certificate Handling,

171. , RFC 2630 Cryptographic Message Syntax (CMS),

172. , RFC 2632 S/MIME V3 Certificate Handling,

173. , RFC 2633 S/MIME V3 Message Specification,

174. , RFC 2634 Enhanced Security Services for S/MIME,

175. , RFC 2692 SPKI Requirements,

176. , RFC 2785 Methods for Avoiding the "Small-Subgroup" Attacks on the Diffie-Hellman Key Agreement Method for S/MIME,

177. , RFC 2246 TLS Protocol Version 1.0,

178. , RFC 2659 Security Extensions For HTML,

179. , RFC 2660 The Secure HyperText Transfer Protocol,

180. , RFC 2817 Upgrading to TLS Within HTTP,

181. , RFC 2818 HTTP Over TLS,

182. , RFC 2401 Security Architecture for the Internet Protocol,

183. , RFC 2402 IP Authentication Header,

184. , RFC 2406 IP Encapsulating Security Payload (ESP),

185. , RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP),

186. , RFC 2137 Secure Domain Name System Dynamic Update,

187. , RFC 2535 Domain Name System Security Extensions,

188. , RFC 2536 DSA KEYs and SIGs in the Domain Name System,

189. , RFC 2537 RSA/MD5 KEYs and SIGs in the Domain Name System,

190. , RFC 2538 Storing Certificates in the Domain Name System,

191. , RFC 2539 Storage of Diffie-Hellman Keys in the Domain Name System,

192. , RFC 2540 Detached Domain Name System Information,

193. , RFC 2541 DNS Security Operational Considerations,

194. , PKCS#1 RSA Cryptography,

195. , PKCS #3 Diffie-Hellman Key Agreement,

196. , PKCS #5 Password-Based Cryptography,

197. , PKCS #6 Extended-Certificate Syntax,

198. , PKCS#7 Cryptographic Message Syntax,

199. , PKCS #8 Private-Key Information Syntax,

200. , PKCS #9 Selected Attribute Types,

201. , PKCS#10 Certification Request Syntax,

202. , PKCS#11 Cryptographic Token Interface (Cryptoki),

203. , PKCS #12 Personal Information Exchange Syntax,

204. , PKCS #13 Elliptic Curve Cryptography,

205. , PKCS #15 Cryptographic Token Information Format,

206. , Federal Public Key Infrastructure (PKI),

207. , Yahoo! Privacy Center,

208. , SearchSecurity.com,

209. , Connect! Мир связи,

210. , Information Assurance Consulting Services,

211. , The independent european association for e-business,

212. , Открытая база знаний по информационной безопасности,

213. , КриптоПро,

214. , Entrust,

215. , ИД Finestreet,

216. , oszone.net,

217. , Компания Демос,

218. , The International PGP Home Page,

219. , The PKI page,

220. , VeriSign,