Web-Based Security Protocols

Transport-level security; Web security

HTTPS (HTTP over SSL); Secure Socket Layer (SSL); Transport Layer Security (TLS)

Web-based security protocols are used to provide for secure transactions between Internet users and Web sites. Such protocols provide confidentiality through encryption and authentication through the use of digital signatures.

The World Wide Web is fundamentally a client–server application running over the Internet and TCP/IP intranets. Web-based security protocols aim to increase the security of client–server interactions over the Web. The use of the Web presents the following security challenges:

• The Web is vulnerable to attacks on the Web servers over the Internet.

• The Web is a highly visible outlet for corporate and product information and as the platform for business transactions. Reputations can be damaged and money can be lost if the Web servers are subverted.

• Web browsers are very easy to use, Web servers are...

Authors and Affiliations

1. WilliamStallings.com, Box 2405, 02631, Brewster, MA, USA

   William Stallings Dr.

Editors and Affiliations

1. Department of Mathematics and Computing Science, Eindhoven University of Technology, 5600 MB, Eindhoven, The Netherlands

   Henk C. A. van Tilborg

2. Center for Secure Information Systems, George Mason University, Fairfax, VA, 22030-4422, USA

   Sushil Jajodia

Reprints and permissions

© 2011 Springer Science+Business Media, LLC

Policies and ethics