Understanding E-Commerce Security: Firewalls, Filtering, Proxy Servers, Check Point, Slides of Fundamentals of E-Commerce

Download Understanding E-Commerce Security: Firewalls, Filtering, Proxy Servers, Check Point and more Slides Fundamentals of E-Commerce in PDF only on Docsity! E-Commerce Security and Privacy, Continued Docsity.com FIREWALL • A barrier between an internal network & “the Internet” • Protects the internal network from outside attacks • Executes administrator-defined security policy • Decides whether a datastream is allowed to pass through or not • Main Components: - packet filter - proxy Docsity.com PROXY • Works at application layer • One proxy per (application layer) protocol - HTTP proxy, FTP proxy, … • User authentication required • Different users can have different privileges • Can be made transparent to users Docsity.com SEVERAL CONFIGURATIONS POSSIBLE • A Sample Configuration: Dual-home Host • Trade-offs: Security vs. Accessability, Security vs. Cost P a c k e t F ilte r P ro x y G a te w a y In te rn a l N e tw o rk In te rn e t Docsity.com CHECKPOINT • Full Name: Check Point TM Software Technologies Limited • Employees: 1000 + • Stock Price: $146.5 (Jan 22, 2001) • Revenues in 2000: $425.3 million • Business Area: Internet Security Docsity.com STOCK PRICE CHART Price $150 $100 $50 97 98 99 00 01 Year Docsity.com REVENUES CHART R even u es $ 4 0 0 M $ 2 0 0 M $ 1 0 0 M 9 5 9 6 9 7 9 8 9 9 0 0 Y ear $ 3 0 0 M Docsity.com Discussion Point • Firewalls aren’t perfect E.g., “Address spoofing” is a problem • Why is CheckPoint so successful? Importance of “feeling secure”? “Knee-high protection?” Docsity.com Public Key Crypto D(E(x, PKu), SKu) = x (user’s Secret Key, user’s public key) Bob generates SKbob, PKbob Bob publishes PKbob Alice: Lookup PKbob y < -- E (x, PKbob) Alice --> Bob: y Bob: x < -- D(y, SKbob) (Eve does not know SKbob) Docsity.com Digital Signatures ... Trickier than the paper “analogue” Doc1 -JF Doc2 -JF Docn -JF Docsity.com