與前兩版相比,本書第 3 版不再重點(diǎn)介紹網(wǎng)上支付的相關(guān)知識,而是將核心完全轉(zhuǎn)移到電子商務(wù)安全上來。本次修訂之處包括:更新了每章的引導(dǎo)案例,使其更具時代性、更符合章節(jié)內(nèi)容;將涉及的操作系統(tǒng)調(diào)整為當(dāng)前主流的操作系統(tǒng);增加了中國商用密碼算法SM 4 的內(nèi)容;增加了電子商務(wù)安全技術(shù)一章,讓學(xué)生能夠站在安全技術(shù)前沿的角度去思考和探索電子商務(wù)安全的未來走向。本書可供高等院校電子商務(wù)本科學(xué)生使用,也可供 MBA、經(jīng)濟(jì)管理類專業(yè)碩士選用,還可供相應(yīng)層次的電子商務(wù)安全人員培訓(xùn)時選用。本書的特點(diǎn)是:一定的基礎(chǔ)知識的導(dǎo)引,一定的故事趣味性,一定的知識深度,一定的應(yīng)用實(shí)例;語言簡潔明了,知識點(diǎn)突出,層次分明;注意課程間的銜接和深入。
劉英卓,工學(xué)博士,畢業(yè)于中科院沈陽自動化研究所。2004年起,就職于南京財(cái)經(jīng)大學(xué),主要從事電子商務(wù)專業(yè)的教學(xué)和研究,出版多部電子商務(wù)相關(guān)教材與專著。
第 1 章 電子商務(wù)安全概述··············································································.1
1.1 客戶機(jī)的安全 ···················································································.2
1.2 服務(wù)器的安全 ···················································································.6
1.3 電子商務(wù)安全問題 ·············································································11
1.4 系統(tǒng)安全評測標(biāo)準(zhǔn) ·············································································13
習(xí)題 ······································································································16
第 2 章 加密與解密 ·······················································································19
2.1 加密與解密的基礎(chǔ)知識 ·······································································20
2.2 對稱密碼學(xué) ······················································································23
2.3 非對稱密碼學(xué) ···················································································39
習(xí)題 ······································································································45
第 3 章 網(wǎng)絡(luò)安全協(xié)議 ····················································································47
3.1 TCP/IP 基礎(chǔ)知識················································································48
3.2 IPSec 協(xié)議························································································56
3.3 PGP 協(xié)議 ·························································································66
3.4 SSL 協(xié)議 ·························································································72
3.5 SET 協(xié)議 ·························································································78
3.6 無線網(wǎng)安全協(xié)議 ················································································86
習(xí)題 ······································································································89
第 4 章 防火墻與 VPN ···················································································92
4.1 防火墻·····························································································92
4.2 VPN ·····························································································.112
習(xí)題 ···································································································.126
第 5 章 認(rèn)證與管理 ····················································································.128
5.1 報文鑒別與身份認(rèn)證········································································.129
5.2 證書與 CA ·····················································································.145
5.3 PKI ······························································································.154
習(xí)題 ···································································································.160
第 6 章 電子商務(wù)安全應(yīng)用···········································································.162
6.1 電子商務(wù)安全策略與體系結(jié)構(gòu)····························································.163
6.2 電子商務(wù)安全解決方案·····································································.167
習(xí)題 ···································································································.183
第 7 章 電子商務(wù)安全編碼···········································································.185
7.1 JAVA 安全 ·····················································································.185
7.2 JSP 安全························································································.194
7.3 電子商務(wù) JSP 安全編碼應(yīng)用·······························································.201
習(xí)題 ···································································································.211
第 8 章 網(wǎng)上安全支付 ·················································································.212
8.1 網(wǎng)上支付系統(tǒng)·················································································.213
8.2 網(wǎng)上安全支付系統(tǒng)的實(shí)現(xiàn)··································································.216
習(xí)題 ···································································································.225
第 9 章 電子商務(wù)安全技術(shù)·······