(Ebook) Bulletproof SSL and TLS 1st Edition by Ivan Ristic ISBN 1907117040 9781907117046

(Ebook) Bulletproof SSL and TLS 1st Edition by Ivan Ristic ISBN 1907117040 9781907117046

(Ebook) Bulletproof SSL and TLS 1st Edition by Ivan Ristic - Ebook PDF Instant Download/Delivery: 1907117040, 9781907117046
Full download (Ebook) Bulletproof SSL and TLS 1st Edition after payment

Product details:

ISBN 10: 1907117040 
ISBN 13: 9781907117046
Author: Ivan Ristic

Bulletproof SSL and TLS is a complete guide to using SSL and TLS encryption to deploy secure servers and web applications. Written by Ivan Ristic, the author of the popular SSL Labs web site, this book will teach you everything you need to know to protect your systems from eavesdropping and impersonation attacks.

In this book, you'll find just the right mix of theory, protocol detail, vulnerability and weakness information, and deployment advice to get your job done:

• Comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI, with updates to the digital version
• For IT security professionals, help to understand the risks
• For system administrators, help to deploy systems securely
• For developers, help to design and implement secure web applications
• Practical and concise, with added depth when details are relevant
• Introduction to cryptography and the latest TLS protocol version
• Discussion of weaknesses at every level, covering implementation issues, HTTP and browser problems, and protocol vulnerabilities
• Coverage of the latest attacks, such as BEAST, CRIME, BREACH, Lucky 13, RC4 biases, Triple Handshake Attack, and Heartbleed
• Thorough deployment advice, including advanced technologies, such as Strict Transport Security, Content Security Policy, and pinning
• Guide to using OpenSSL to generate keys and certificates and to create and run a private certification authority
• Guide to using OpenSSL to test servers for vulnerabilities
• Practical advice for secure server configuration using Apache httpd, IIS, Java, Nginx, Microsoft Windows, and Tomcat

This book is available in paperback and a variety of digital formats without DRM. Digital version of Bulletproof SSL and TLS can be obtained directly from the author, at feistyduck.com.

(Ebook) Bulletproof SSL and TLS 1st Table of contents:

• Chapter 1: Introduction

  • What Is SSL/TLS?

  • Why Do We Need It?

  • Brief History of SSL/TLS

  • Goals of the Book

  • Structure of the Book

• Chapter 2: How SSL/TLS Works

  • Cryptographic Primitives

  • Public Key Cryptography

  • Digital Certificates and PKI

  • The Handshake Protocol

  • Record Protocol

  • Alert Protocol

  • Change Cipher Spec Protocol

  • Sessions and Resumption

• Chapter 3: Certificates

  • Certificate Basics

  • Certificate Authorities

  • Certificate Chains and Trust

  • Certificate Revocation

  • Certificate Pinning (HPKP)

  • Extended Validation (EV) Certificates

  • Self-Signed Certificates

  • Managing Certificates (OpenSSL, etc.)

• Chapter 4: Protocols

  • SSL 2.0 (Historical)

  • SSL 3.0 (Deprecated)

  • TLS 1.0

  • TLS 1.1

  • TLS 1.2

  • TLS 1.3 (if covered, depending on edition update)

  • Protocol Downgrade Attacks

• Chapter 5: Cipher Suites

  • Understanding Cipher Suite Names

  • Key Exchange Algorithms

  • Authentication Algorithms

  • Symmetric Encryption Algorithms

  • Hash Algorithms

  • Choosing Strong Cipher Suites

  • Forward Secrecy

  • Perfect Forward Secrecy (PFS)

• Chapter 6: Attacks on SSL/TLS

  • Known Vulnerabilities (e.g., Heartbleed, POODLE, BEAST, CRIME, FREAK, Logjam, DROWN)

  • Man-in-the-Middle (MITM) Attacks

  • Side-Channel Attacks

  • Practical Exploits

• Chapter 7: Deployment Best Practices

  • Server Configuration (Apache, Nginx, IIS)

  • Client Configuration (Browsers, OS)

  • Content Delivery Networks (CDNs) and Load Balancers

  • Testing and Auditing Your SSL/TLS Implementation (e.g., Qualys SSL Labs)

  • Monitoring and Alerting

• Chapter 8: Advanced Topics

  • HTTP Strict Transport Security (HSTS)

  • Online Certificate Status Protocol (OCSP)

  • OCSP Stapling

  • Server Name Indication (SNI)

  • Application-Layer Protocol Negotiation (ALPN)

  • NPN

  • Elliptic Curve Cryptography (ECC)

  • DNS-based Authentication of Named Entities (DANE)

• Chapter 9: Troubleshooting

  • Common SSL/TLS Issues

  • Debugging Tools and Techniques

• Chapter 10: The Future of SSL/TLS

  • Post-Quantum Cryptography

  • Ongoing Standardization Efforts

People also search for (Ebook) Bulletproof SSL and TLS 1st:

bulletproof ssl and tls pdf
    
bulletproof ssl and tls pdf free download
    
bulletproof ssl and tls
    
bulletproof tls and pki pdf
    
bulletproof tls and pki

Tags: Ivan Ristic, Bulletproof, SSL