Securing Internet Communication with S-HTTP and SSL encryption methods

• Secure Socket Layer (SSL) protocol: uses public key encryption to secure channel over
  public Internet
• Secure Hypertext Transfer Protocol (S-HTTP): extended version of Hypertext Transfer
  Protocol; provides for encryption of individual messages between client and
  server across Internet
• S-HTTP is the application of SSL over HTTP; allows encryption of information passing
  between computers through protected and secure virtual connection

Securing e-mail with S/MIME, PEM, and PGP encryption methods

• Secure Multipurpose Internet Mail Extensions (S/MIME): builds on Multipurpose Internet Mail Extensions (MIME) encoding format by adding encryption and authentication
• Privacy Enhanced Mail (PEM): proposed as standard to function with public-key cryptosystems; uses 3DES symmetric key encryption
• Pretty Good Privacy (PGP): uses IDEA Cipher for message encoding

Securing Web transactions with SET, SSL, and S-HTTP encryption methods

• Secure Electronic Transactions (SET): developed by MasterCard and VISA in 1997 to provide protection from electronic payment fraud
• Uses DES to encrypt credit card information transfers
• Provides security for both Internet-based credit card transactions and credit card swipe systems in retail stores
• Securing Wireless Networks with WEP and WPA
• Wired Equivalent Privacy (WEP): early attempt to provide security with the 8002.11 network protocol
• Wi-Fi Protected Access (WPA): created to resolve issues with WEP
• Next Generation Wireless Protocols: Robust Secure Networks (RSN), AES –Counter Mode Encapsulation, AES –Offset Codebook Encapsulation
• Bluetooth: de facto industry standard for short range wireless communications between devices; can be exploited by anyone within approximately 30 foot range, unless suitable security controls are implemented

Securing TCP/IP with IPSec encryption methods

• Internet Protocol Security (IPSec): open source protocol to secure communications across any IP-based network
• IPSec designed to protect data integrity, user confidentiality, and authenticity at IP packet level
• IPSec combines several different cryptosystems: Diffie-Hellman; public key cryptography; bulk encryption algorithms; digital certificates
• In IPSec, IP layer security obtained by use of application header (AH) protocol or encapsulating security payload (ESP) protocol

Securing TCP/IP with PGP encryption continued…

• Pretty Good Privacy (PGP): hybrid cryptosystem designed in 1991 by Phil Zimmermann
• Combined best available cryptographic algorithms to become open source de facto standard for encryption and authentication of e-mail and file storage applications
• Freeware and low-cost commercial PGP versions are available for many platforms
• PGP security solution provides six services: authentication by digital signatures; message encryption; compression; e-mail compatibility; segmentation; key management