Professional Documents
Culture Documents
Chapter 5 An Ninh Trong Thuong Mai Dien Tu 5231
Chapter 5 An Ninh Trong Thuong Mai Dien Tu 5231
Ni dung
13/04/2011
1 2
Cc vn v an ton trong thng mi in t Cc loi ti phm v cc dng tn cng trn mng Mt s gii php an ton trong thng mi in t
www.viethanit.edu.vn
vo mt s ti nguyn ca mng.
- Xc thc (Authentication): Qu trnh xc thc mt thc th xem h khai bo vi c quan xc
thc h l ai.
3 www.viethanit.edu.vn
- Thu thp thng tin (Auditing): Qu trnh thu thp thng tin v cc mun truy cp vo ti nguyn no trong mng bng cch s dng quyn u tin v cc hnh ng khc. - S ring t (Confidentiality/Privacy): l bo v thng tin mua bn ca ngi tiu dng. - Tnh ton vn (Integrity): Kh nng bo v d liu khng b thay i. - Khng thoi thc (Nonrepudiation): Kh nng khng th t chi cc giao dch thc hin.
4 www.viethanit.edu.vn
www.viethanit.edu.vn
T hai pha - Bng cch no h c th bit ng truyn s khng b theo di? - Bng cch no h c th chc chn rng cc thng tin c lu chuyn gia 2 bn s khng b thay i?
www.viethanit.edu.vn
www.viethanit.edu.vn
Chng ph nh
www.viethanit.edu.vn
hng ni l ng s tht
10
www.viethanit.edu.vn
Tnh tin cy
11
www.viethanit.edu.vn
Tnh ring t - Lin quan n vic kim sot cc thng tin c nhn m khch hng cung cp v chnh bn thn h. Ch 2 vn
:
+ cn thit lp chnh sch ni b qun l vic s dng cc thng tin v khch hng
Tnh ch li - Lin quan n kh nng m bo cc chc nng ca website c thc hin ng nh mong i
13
www.viethanit.edu.vn
- Tn cng Cyber
- Hackers (tin tc) - Crackers
14
www.viethanit.edu.vn
16
www.viethanit.edu.vn
Cc on m nguy him Tin tc v cc chng trnh ph hoi Gian ln th tn dng S la o S khc t phc v K trm trn mng S tn cng t bn trong doanh nghip
17 www.viethanit.edu.vn
Cc on m nguy him
13/04/2011
e da khc nhau
Virus
Worm
Nhng con nga thnh t roa Bad applet
18
www.viethanit.edu.vn
Cc on m nguy him
13/04/2011
19
www.viethanit.edu.vn
Cc on m nguy him
13/04/2011
Macro virus: chim 75% n 80% cc loi virus c pht hin. N ch nhim vo cc tp ng dng c son tho nh: MS Word, MS Excel, MS PowerPoint Virus tp: l nhng virus ly nhim vo cc tp tin c
Cc on m nguy him
13/04/2011
ni vi cc worm
21
www.viethanit.edu.vn
Cc on m nguy him
13/04/2011
22
www.viethanit.edu.vn
Cc on m nguy him
13/04/2011
23
www.viethanit.edu.vn
Cc on m nguy him
13/04/2011
Bad Applet l mt chng trnh ng dng nh c nhng trong mt phn mm thc hin mt nhim v c th lm tng kh nng tng tc ca website. Cc bad applet l on m di ng nguy him. Ngi
24
www.viethanit.edu.vn
Tin tc (Hacker): l ngi c th vit hay chnh sa phn mm, phn cng my tnh bao gm lp trnh, qun tr v bo mt. Nhng ngi ny hiu r hot ng ca h thng my tnh, mng my tnh v dng kin thc bn
25
www.viethanit.edu.vn
26
www.viethanit.edu.vn
Gian ln th tn dng
13/04/2011
27
www.viethanit.edu.vn
Gian ln th tn dng
13/04/2011
28
www.viethanit.edu.vn
S la o
13/04/2011
29
www.viethanit.edu.vn
S khc t dch v
13/04/2011
phn b dch v)
30
www.viethanit.edu.vn
31
www.viethanit.edu.vn
32
www.viethanit.edu.vn
3.1
3.2
33
www.viethanit.edu.vn
34
www.viethanit.edu.vn
Khi nim: l qu trnh chuyn vn bn hay cc ti liu gc thnh cc vn bn di dng mt m bt c ai ngoi ngi gi v ngi nhn, u khng th c c Mc ch ca k thut m ha l m bo an ninh thng tin khi truyn pht L k thut kh ph bin, c kh nng m bo 4 trong 6 kha cnh an ninh ca thng mi in t: m bo tnh
- K thut thay th
- K thut hon v
36
www.viethanit.edu.vn
M ha
m ha v gii m cn mt gi tr c bit
gi l kha (key)
Gii m vn bn khi khng bit kha gi l
ph m
Cc thut ton m ha phi m bo vic ph m l khng th hoc cc k kh khn
38
38 www.viethanit.edu.vn
an ton ca gii thut m ha An ton v iu kin: bn m khng cha thng tin xc nh duy nht nguyn bn tng ng. Tc l khng th gii m c cho d c my tnh c tc nhanh th no i chng na. (Ch duy nht thut ton m ha n mt ln tha mn an ton v iu kin) An ton tnh ton: tha mn mt trong hai iu kin Chi ph ph m vt qu gi tr thng tin Thi gian ph m vt qu tui th thng tin
39 39 www.viethanit.edu.vn
Li ch ca M ha thng tin
40
40 www.viethanit.edu.vn
Hin nay c hai phng php m ha M ha i xng (b mt) M ha kha cng khai (bt i xng)
41
41 www.viethanit.edu.vn
M ha kha i xng: M ha i xng hay cn gi l m ha kha b mt l phng php m ha ch s dng 1 kha cho c qu trnh m ha v qu trnh gii m Ngi gi m kha 1 thng ip sau gi thng ip
42
42 www.viethanit.edu.vn
Thng ip ban u
Thng ip i m
Internet
Thng ip i m
Thng ip ban u
43
43 www.viethanit.edu.vn
M ha Ceasar
M ha Vigenere M ha hng ro M ha DES
44
44 www.viethanit.edu.vn
K = n(n-1)/2
- K: s kha trong m ha kha b mt - n: s ngi lin lc
46
www.viethanit.edu.vn
M ha kha cng khai: L phng php s dng 2 m kha trong qu trnh m ha. 1 kha dng m ha v 1 kha dng gii m 2 kha ny c quan h v mt thut ton sao cho d
47
www.viethanit.edu.vn
Thng ip ban u
Thng ip i m
Internet
Thng ip i m
Thng ip ban u
Ngi gi
Ngi nhn
48
www.viethanit.edu.vn
M ha kha cng khai Mi ngi s dng c mt cp gm 2 kha, mt kha cng khai v mt kha b mt Kha cng khai c thng bo rng ri cho nhng ngi s dng khc trong h thng Dng m ha thng ip hoc kim tra ch k Kha b mt Ch ni gi c bit gii m thng ip hoc to ch k
49 www.viethanit.edu.vn
Ted Joy Mike Alice Kha cng khai ca Alice Kha ring ca Alice
Nguyn bn u vo
Nguyn bn u ra
Bn m truyn i
Gii thut m ha
50
Ted
Joy
Mike Bob Kha cng khai ca Bob Nguyn bn u ra Bn m truyn i
Nguyn bn u vo
Gii thut m ha
51
M ha/gii m m bo s b mt ca thng tin Ch k s H tr xc thc vn bn Trao i kha Cho php chia s kha phin trong m ha i xng
52
www.viethanit.edu.vn
u im ca m ha kha cng khai Kha m ha v gii m ring bit nn kh b l (Ch 1 ngi bit kha b mt) Khng cn phi trao i kha
53
www.viethanit.edu.vn
Nhc im ca m ha kha cng khai Tc x l rt chm Vic xc thc kha cng tng i kh khn
54
54 www.viethanit.edu.vn
H m ha RSA
55
55 www.viethanit.edu.vn
u im
Kha cng khai - Dng hai kha khc nhau - Tng i d phn pht kha - H tr tnh ton vn (nht qun)
56
www.viethanit.edu.vn
ko di trong bao lu
Xc nh r mc cn thit ca d liu; Xc nh r thi gian m trong d liu cn c bo v an ton, hay ni cch khc l s cn thit ca d liu cn trong bao lu (sau c th ht gi tr).
57
www.viethanit.edu.vn
Giao thc tha thun m ha - Giao thc tha thun m ha l qu trnh cc bn tham gia giao dch trao i m kha, giao thc t ra qui tc thng tin: loi thut ton no c s dng trong lin lc
3.1.2 Ch k in t
13/04/2011
Ch k in t l bt c m thanh in t, k hiu hay qu trnh in t gn vi hoc lin quan 1 cch logic vi 1 vn bn in t khc theo 1 nguyn tc nht nh v c ngi k (hoc c nh k) vn bn thc thi hoc p dng Ch k in t l 1 phng php m kha cng cng c s dng ph bin trong thng mi in t.
59
www.viethanit.edu.vn
3.1.2 Ch k in t
13/04/2011
Ch k in t l bng chng hp php dng v khng nh trch nhim ca ngi k vn bn in t v ni dung ca n, tnh nguyn gc ca vn bn in t sau khi chuyn khi ngi k n
ra vn bn
60 www.viethanit.edu.vn
3.1.2 Ch k in t
13/04/2011 Kha chung ca ngi nhn Thng ip gc Kha ring ca ngi nhn
Thng ip gc
Thng ip m ha
Thng ip m ha
Thng ip gc
Thng
ip
gc
M ha Sign
Sign
ch k
M hnh hot ng ca ch k in t
61
www.viethanit.edu.vn
C quan chng nhn cn c vo to mt thng ip gi l chng thc in t (digital certificate) bao gm cc thng tin:
Tn ca c nhn hoc t chc Kha cng khai S nh danh ca chng thc in t Thi hn hiu lc Ngy cp Ch k ca c quan chng nhn Cc thng tin nhn dng khc
63 www.viethanit.edu.vn
giao dch in t
Tp hp h thng cc c quan chng nhn v cc th tc chng thc in t c tt c cc i tng tham gia
64
www.viethanit.edu.vn
Yu cu cp chng nhn
C quan chng nhn Tham gia giao dch mua bn trc tuyn
65
www.viethanit.edu.vn
Phn loi Loi 1, n gin nht v n bao gm cc thng tin kim tra ti thiu nh tn, a ch v a ch email. Sau khi c kim tra, s nhn c mt giy chng nhn s ho. Loi 2, bao gm cc thng tin v bng li xe, s bo him x hi v ngy sinh. Loi 3, bao gm cc thng tin ca loi 2 v sc tn dng. Loi 4 bao gm cc thng tin v chc v ca c nhn trong t chc, ng thi vic xc nhn khng nht thit chm dt ch vi cc thng tin ny.
66 www.viethanit.edu.vn
67
www.viethanit.edu.vn
Bc tng la
68
www.viethanit.edu.vn
c im ca bc tng la
69
www.viethanit.edu.vn
Phn loi
- Tng la lc gi
- Cng ng dng
- Cng mc mch
70
www.viethanit.edu.vn
3.1.5 Bo v my tnh
Chc nng t bo v ca h iu hnh Authorization: cp php s dng cc ti nguyn cho user Accounting: ghi li nht k truy cp ca user Phn mm dit virus Nhn bit v tiu dit hu ht cc loi virus thng thng ngay khi
13/04/2011
1
2
72
www.viethanit.edu.vn