2.www.k8k8.com
www.k8k8.com 时间:2021-03-20 阅读:()
TITLE:PracticalCryptography:PrivacyforBusinessandE-commerceINSTRUCTOR:FrederickM.
Avolio,independentsecurityconsultantSUMMARYOFTOPICS:UpFront—DefiningTermsBasicsofCryptography—typesandmethods,Applications—PrivateMessaging(E-mail)FilesandDirectoriesStrongUserAuthenticationVirtualPrivateNetworksWebSitesElectronicCommerceNextSteps1PracticalCryptography:AnOverviewFrederickM.
Avolio7/13/98Copyright1998FrederickM.
Avolio2Shameless(butbrief)MarketingAvolioConsulting,http://www.
avolio.
com/–NetworkandcomputersecurityTrainingPolicyandProceduredevelopmentProductReviewandAnalysis–ProductMarketing,technicalassistance–E-mailsystemdesign,configuration,andtraining–Writing:whitepapers,tutorials,productreviews7/13/98Copyright1998FrederickM.
Avolio3SyllabusDefiningTermsBasicsofCryptographyPrivateMessaging(E-mail)FilesandDirectoriesStrongUserAuthenticationVirtualPrivateNetworksWebSitesElectronicCommerce7/13/98Copyright1998FrederickM.
Avolio4DefiningTermsConcernFraudUnauthorizedaccessSnoopingMessageAlterationDisavowalRequirementAuthenticationAuthorizationPrivacyDataIntegrityNon-RepudiationFromUnderstandingDigitalSignaturesbyGailGrant,McGraw-Hill,19977/13/98Copyright1998FrederickM.
Avolio5AuthenticationandIntegrityGuaranteetoReceiverKnowsidentityofsenderMessagenotalteredNotundulydelayedFromInternetSecuritypresentationatWICSbyWhitDiffie7/13/98Copyright1998FrederickM.
Avolio6PrivacyorConfidentialityGuaranteetoSenderAuthorizedreceiversonlyFromInternetSecuritypresentationatWICSbyWhitDiffie7/13/98Copyright1998FrederickM.
Avolio7BusinessNeedsforCryptoPrivacyMostbusinesses(andgovernments)don'tneedlong-termsecurityMailinglists,businessplans,negotiations,productR&DCommerceprivacyneedsaremoderateFinancialinformationmightneedtobesecureforadecadeExceptionsareembarrassments:personal,political,businessFromInternetSecuritypresentationatWICSbyBruceSchneier7/13/98Copyright1998FrederickM.
Avolio8BusinessNeedsforCryptoAuthenticationAuthenticatingsessionsversustransactionsNeedforaudittraildependsonapplicationAudittrailmustbeusableincourtwhilenotcompromisingthefuturesecurityofthesystemFromInternetSecuritypresentationatWICSbyBruceSchneier7/13/98Copyright1998FrederickM.
Avolio9BasicCryptographySecretkeyorsymmetricencryptionPublickeyorassymmetricencryptionOne-wayhashfunctions7/13/98Copyright1998FrederickM.
Avolio10EncryptionSecret-Key(Symmetric)Nowisthetimeforallgoodmen.
.
.
sd84$2*q}59(o32nvt-=gf]|@l^.
.
.
DecryptionEncryptionNowisthetimeforallgoodmen.
.
.
7/13/98Copyright1998FrederickM.
Avolio11EncryptionSecret-Key(Symmetric)BobencryptshismessagestoTedwiththeirsharedsecretkeyTeddecryptsmessagesfromBobwiththesamesecretkey.
7/13/98Copyright1998FrederickM.
Avolio12EncryptionSecret-Key(Symmetric)BobdecryptsTed'smessagesusingtheirsecretkey.
TedsendsmessagesbacktoBobwiththesamesecretkey.
7/13/98Copyright1998FrederickM.
Avolio13EncryptionPublic-Key(Asymmetric)Nowisthetimeforallgoodmen.
.
.
sd84$2*q}59(o32nvt-=gf]|@l^.
.
.
DecryptionEncryptionNowisthetimeforallgoodmen.
.
.
7/13/98Copyright1998FrederickM.
Avolio14EncryptionPublic-Key(Asymmetric)Carol,Ted,Bob,andAliceposttheirpublickeysandkeeptheirprivatekeyssecret7/13/98Copyright1998FrederickM.
Avolio15EncryptionPublic-Key(Asymmetric)TedBobAliceCarol'sPublicKeyCarol'sPublicKeyCarol'sPublicKeyCaroldecryptsthesemessagesusingherprivatekey7/13/98Copyright1998FrederickM.
Avolio16EncryptionPublic-Key(Asymmetric)Ted'spublickeyBob'spublickeyAlice'spublickeyCarolrepliestomessagesusingeachrecipient'spublickeyTedBobAliceTed'sprivatekeyBob'sprivatekeyAlice'sprivatekey7/13/98Copyright1998FrederickM.
Avolio17HashFunctionsConvertsastringofdataofanysizeintoafixed-lengthhashNowaytogobackwardsE.
g.
,afingerprintChancesofanytwostringsofdatahashingtothesamevaluevery,verysmall.
Thisisveryimportant!
7/13/98Copyright1998FrederickM.
Avolio18HashFunctionsMD5Messagetextofarbitrarysize.
.
.
MessageTextHashofMessageofshort,fixedsize7/13/98Copyright1998FrederickM.
Avolio19SecurityProblemsSolvedbyCryptographyPrivacyofstoreddata,messages,andconversationsSecureelectroniccommerceTransactionnon-repudiationUseranddataauthenticationE-mailsecurityMulti-partycontrolSecureauditlogsFromInternetSecuritypresentationatWICSbyBruceSchneier7/13/98Copyright1998FrederickM.
Avolio20ApplicationExamplesE-mailUserAuthenticationPrivacyforFilesandDirectoriesVirtualPrivateNetworksWebSiteSecurity7/13/98Copyright1998FrederickM.
Avolio21PrivateE-mailTheGoalsConfidentialityAuthenticationNon-repudiationSecuringE-mailaswellorbetterthanpostalmail!
7/13/98Copyright1998FrederickM.
Avolio22IntegrityandAuthentication1.
MessageSignatureMD5RSANowisthetimeforallgoodmen.
.
.
Sender'sPrivateKeyMessageTextHashofMessage7/13/98Copyright1998FrederickM.
Avolio23IntegrityandAuthentication2.
DatatoSendNowisthetimeforallgoodmen.
.
.
MessageSignatureMessageText7/13/98Copyright1998FrederickM.
Avolio24DigitallySignedMessageTO:sysadminFrom:avolio@tis.
com-----BEGINPGPSIGNEDMESSAGE-----PleasecompletethedeploymentofthePGPsoftwaretoallemployees.
Fred,CSO-----BEGINPGPSIGNATURE-----Version:4.
5iQCVAgUBM+ZICTGr72+Les/dAQHmhwP/WorAeL6LzTJJre6lU77oPkNxYS+izmnM1ozOHxVD6pDlEu7pgsju0g3yRO6tKxN4uJRW5ZeOUtVEgBw+dgFptuOSD9cmDAgSw3SAEFwp9C6cPO0L9MMbc+eps3w8GKLlZkYRZPuANom0ggbmRpqDkjMIU25yEUr5Vj/P54ZuaRY==zu3P-----ENDPGPSIGNATURE--—7/13/98Copyright1998FrederickM.
Avolio25IntegrityandAuthenticationHowcananyonevalidateintegrityandauthenticatesenderMD5RSASender'sPublicKeyCompareRSANowisthetimeforallgoodmen.
.
.
MessageTextMessageSignature7/13/98Copyright1998FrederickM.
Avolio26TO:sysadminFrom:avolio@tis.
com-----BEGINPGPSIGNEDMESSAGE-----PleasecompletethedeploymentofthePGPsoftwaretoallemployees.
Fred,CSO-----BEGINPGPSIGNATURE-----Version:4.
5iQCVAgUBM+ZICTGr72+Les/dAQHmhwP/WorAeL6LzTJJre6lU77oPkNxYS+izmnM1ozOHxVD6pDlEu7pgsju0g3yRO6tKxN4uJRW5ZeOUtVEgBw+dgFptuOSD9cmDAgSw3SAEFwp9C6cPO0L9MMbc+eps3w8GKLlZkYRZPuANom0ggbmRpqDkjMIU25yEUr5Vj/P54ZuaRY==zu3P-----ENDPGPSIGNATURE--—CheckingaSignedMessage7/13/98Copyright1998FrederickM.
Avolio27EncryptionHybridSystemsSymmetrickeyisfastforencryption,butdistributingkeysisdifficultPublickeyisgoodforkeydistribution,butslowatencryptionSolution:usepublickeycryptoasasecuremeansofdistributingthekeysforsymmetricencryption7/13/98Copyright1998FrederickM.
Avolio28AddingPrivacy1.
EncryptedMessageDESRandomkeyNowisthetimeforallgoodmen.
.
.
s5%lk)@slm#]l0|;k^nb[wepqs.
.
.
MessageText7/13/98Copyright1998FrederickM.
Avolio29AddingPrivacy2.
RandomkeyEncryptedkeyRSARecipient'sPublicKey7/13/98Copyright1998FrederickM.
Avolio30AddingPrivacy3.
MD5RSANowisthetimeforallgoodmen.
.
.
Sender'sPrivateKeyMessageSignatureMessageText7/13/98Copyright1998FrederickM.
Avolio31AddingPrivacy4.
EncryptedMessageDatatoSendEncryptedkeys5%lk)@slm#]l0|;k^nb[wepqs.
.
.
MessageSignature7/13/98Copyright1998FrederickM.
Avolio32AddingPrivacyHowcantherecipient(andonlytherecipient)decrypt–DESkeyisencryptedwithrecipientspublickey–Recipientdecryptswithprivatekey(onlyrecipienthasthis)–DESkeyisappliedtoencryptedmessage–Theresultistheclear-textmessage7/13/98Copyright1998FrederickM.
Avolio33SampleEncryptedMessageDate:Tue,08Jul199716:39:25-0400To:user@domainFrom:FrederickMAvolio-----BEGINPGPMESSAGE-----hIwCMavvb4t6z90BA/42UOAdWvnzfhRG2xXyYe203CISLsn2O39vM/y640hNbSl7U29aNGZFfLMRGn7eLZG43SWwBz4cHjphG6iAzeLftRgHkLggxXA9VpGki5PyNID9B0rk4TpRVE3qzgTbdio69aMlK6BdAQ4zWkyxSCi0oR3Vpnh+VVZyOVyaX8etlYRMAvUTsuDYCkr1AQH+OlA4ntqhxoPP/SJpKm5ugMLYiiij8ak8V90a8IYMkYB0CzMrliOJ6ZZxQm1x8orgjL/6Bm5EoSvN4eCCeA/xXKYAAAHXLhG47kVhJkjlPrI/U/sr2aQEm6r+aU1s0ziU1LxF2c5DAW6cD5b4xH+EbvYrnQQJClNMh9y03SjviXvnqFDCO4M70u3iLC50+em4PouqM1DZdoW8O5pb=vhFx-----ENDPGPMESSAGE-----7/13/98Copyright1998FrederickM.
Avolio34Date:Tue,08Jul199716:39:25-0400To:user@domainFrom:FrederickMAvolio-----BEGINPGPMESSAGE-----hIwCMavvb4t6z90BA/42UOAdWvnzfhRG2xXyYe203CISLsn2O39vM/y640hNbSl7U29aNGZFfLMRGn7eLZG43SWwBz4cHjphG6iAzeLftRgHkLggxXA9VpGki5PyNID9B0rk4TpRVE3qzgTbdio69aMlK6BdAQ4zWkyxSCi0oR3Vpnh+VVZyOVyaX8etlYRMAvUTsuDYCkr1AQH+OlA4ntqhxoPP/SJpKm5ugMLYiiij8ak8V90a8IYMkYB0CzMrliOJ6ZZxQm1x8orgjL/6Bm5EoSvN4eCCeA/xXKYAAAHXLhG47kVhJkjlPrI/U/sr2aQEm6r+aU1s0ziU1LxF2c5DAW6cD5b4xH+EbvYrnQQJClNMh9y03SjviXvnqFDCO4M70u3iLC50+em4PouqM1DZdoW8O5pb=vhFx-----ENDPGPMESSAGE-----SampleEncryptedMessage7/13/98Copyright1998FrederickM.
Avolio35SampleEncryptedMessageTO:user@domainFrom:avolio@tis.
comWehavedeployedthePGPmailsoftwareandhavecompletedtraining.
Fred7/13/98Copyright1998FrederickM.
Avolio36SampleEncryptedMessageTO:user@domainFrom:avolio@tis.
comWehavedeployedthePGPmailsoftwareandhavecompletedtraining.
Fred7/13/98Copyright1998FrederickM.
Avolio37FilesandDirectoriesTheGoalsSealdatafilesfromunauthorizedaccessoralteration(reading,writing,etc.
)7/13/98Copyright1998FrederickM.
Avolio38FilesandDirectoriesSimilartoE-mailconcernsandsolutionsEncryptafilewithasymmetrickeyEncryptafilewithYOURpublickeyLikelockingdrawersinadeskoffilecabinetDesertStorm…7/13/98Copyright1998FrederickM.
Avolio39FilesandDirectories7/13/98Copyright1998FrederickM.
Avolio40FilesandDirectoriesNeedtobebuiltintofilesystemNeedtobebuiltintoapplicationsOpen—automaticallydecryptifencryptedClose—automaticallyencryptifwasencrypted(anddeletecleartext)Closewithencrypt7/13/98Copyright1998FrederickM.
Avolio41StrongUserAuthenticationThegoals"Toestablishthevalidityofaclaimedidentityortoprovideprotectionagainstfraudulenttransactionsbyestablishingthevalidityof.
.
.
[the]individual.
.
.
"—NCSC"RedBook"Toidentifyinawaythatisnotvulnerabletoareplayattack7/13/98Copyright1998FrederickM.
Avolio42ReplayAttackUsername:fredPassword:lisa%7/13/98Copyright1998FrederickM.
Avolio43Stronguserauthentication–SmartcardsortokensSoftware(server)andsmartcardbasedPIN-protectedsmartcardprivatekeySystemissueschallengebasedonuserUserusespasswordtounlocksmartcard,whichreadschallenge,calculatescryptographicresponseResponseisusedasresponsetochallengeAuthenticationTechniques7/13/98Copyright1998FrederickM.
Avolio44AuthenticationTechniquesChallenge:"876261"ServersendsUser"unlocks"authenticationtokenbykeyinginPersonalIdentificationNumberUserenterschallengeintoauthenticationtokenTokenreturnsanencryptedresponsetothechallenge"722512""1105""876261"UserrespondstoserverwithuniqueresponseServercomparesresponse"722512"(Serverandtokenshareasecretencryptionkeythatuserneverhasaccessto)(Secretkey:"0x8A5F42")7/13/98Copyright1998FrederickM.
Avolio45VirtualPrivateNetworksThegoalsPrivacyofcommunicationbetweensecureenclavesoveranuntrustednetworkPrivacyandaccessforremoteemployeesPrivacyandcontrolledaccessforremoteclients7/13/98Copyright1998FrederickM.
Avolio46Encryption—"VirtualPrivateNetworks"and"VirtualNetworkPerimeters"LANALANALANBLANBPrivacy7/13/98Copyright1998FrederickM.
Avolio47VirtualPrivateNetworksFirewall-to-firewallconnectionsovertheInternet.
Usingencrypted"tunnels"overtheInternettoconnectLANsandWANscanreducecosts23-50%(USComputerMarch1996).
SecureWideAreaNetworking(S/WAN).
IPv6,end-to-endencryption,IPSECFirewall-to-firewallconnectionsovertheInternet.
Usingencrypted"tunnels"overtheInternettoconnectLANsandWANscanreducecosts23-50%(USComputerMarch1996).
SecureWideAreaNetworking(S/WAN).
IPv6,end-to-endencryption,IPSEC7/13/98Copyright1998FrederickM.
Avolio48ExtendingthePerimeterPublicNetworkVirtualNetworkPerimeter7/13/98Copyright1998FrederickM.
Avolio49GlobalVPNsKeyIssues–TheInternetisaworldwidenetwork–Companiescrossinternationalboundries–Partnershipscrossinternationalboundries–Privacyinbusinesstransactionsiscriticaltosuccess–NetworkcommunicationsprivacymeansemployingencryptionKeyIssues–TheInternetisaworldwidenetwork–Companiescrossinternationalboundries–Partnershipscrossinternationalboundries–Privacyinbusinesstransactionsiscriticaltosuccess–Networkcommunicationsprivacymeansemployingencryption7/13/98Copyright1998FrederickM.
Avolio50GlobalVPNsEncryptionRequirementsStrong(56bitorbetterkeylength)ExportablePlatformindependentEncryptionRequirementsStrong(56bitorbetterkeylength)ExportablePlatformindependent7/13/98Copyright1998FrederickM.
Avolio51WebSiteSecurityThegoalsDeploymentofwebsitesforinternalandexternaluseProtectionfrommodificationAssurancedatahasnotbeenmodifiedControlofaccess7/13/98Copyright1998FrederickM.
Avolio52WebSiteSecurityWebsiteattacksCIADOJNASAUSAFSingaporeGovernmentNationofIslamMGMStudios7/13/98Copyright1998FrederickM.
Avolio53WebSiteSecurityMessagehashofallfilesonwebsitekept–Periodiccheckingofstoredhashagainsthashofpages—integritycheckingDigitallysignpages,documents,software–Assuranceforusersthatdatahasnotbeenmodified7/13/98Copyright1998FrederickM.
Avolio54WebSiteSecurityControlledaccess–Stronguserauthentication–Usernameandpasswordoverprotectedchannel7/13/98Copyright1998FrederickM.
Avolio55WebSiteSecurityftp://info.
cert.
org/pub/cert_advisories/CA-97.
20.
javascript:-----BEGINPGPSIGNEDMESSAGE-----CERT*AdvisoryCA-97.
20Originalissuedate:July8,1997Lastrevised:July28,1997,AppendixA-addedinformationforHewlett-PackardandIBM.
SectionIII.
A-slightwordingchange.
Acompleterevisionhistoryisattheendofthisfile.
Topic:JavaScriptVulnerability…-----BEGINPGPSIGNATURE-----Version:2.
6.
2iQCVAwUBM9yyN3VP+x0t4w7BAQFLAgP/Z1moGK6SI2Q3OBbV/fpCOcW2J9TdXE3/UHuZ7vHCjKDWxelHr5551JQ9i19s6sVBNDOX1W031IrlS36nIblp3vX4rVuAaufwVOxqxYg44i3gxsC8NgC/HW5j7KHsOiGzoRmU5a+vWyLmmged+Y2wBDrxGeqbHacE4S6FPph4/w8==5MP2-----ENDPGPSIGNATURE-----7/13/98Copyright1998FrederickM.
Avolio56E-CommerceTransactionsecurity–Privacyofasale–IntegrityofasaleElectronicpayment–Privacy–Integrity–ProvenanceofanagreementtotransferfundsFromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,19977/13/98Copyright1998FrederickM.
Avolio57TransactionSecurityVirtualPrivateNetworkapproach–Encryptionandauthenticationdoneaspartofthenetworkcommunication–Networksoftwaremustbemodified–UsersneednotmodifybehaviororapplicationsoftwareFromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,19977/13/98Copyright1998FrederickM.
Avolio58TransactionSecurityApplication-levelencryption–OSandplatformindependent–Nodataisexposedbetweenclientandserversoftware–MostwebbrowsersareusingthistypeofsecuritySSL,SHTTPFromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,19977/13/98Copyright1998FrederickM.
Avolio59TransactionSecurityApplication-levelencryption–Browserandservershakehandsanddecideonencryptionschemeandkey–Dataistransmittedencryptedwiththekey–Theyshakehandsattheend.
FromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,1997ThisisthemeaningofthefilledinkeyontheNetscapebrowsers.
7/13/98Copyright1998FrederickM.
Avolio60TransactionSecurityMoste-commercetodayusesapplication-leveltransactionsecurityMosttransactionsecuritytodayprotectsprivacyofthedatasentfromtheclient–Orderblanksorquestionnaires–CreditCardnumbersMoste-commerceontheInternettodayisliketelephonecatalogorderingwithoutthecatalogortelephone7/13/98Copyright1998FrederickM.
Avolio617/13/98Copyright1998FrederickM.
Avolio627/13/98Copyright1998FrederickM.
Avolio63ElectronicPaymentSecurepaymentprotocolsexistMostinvolveatrustedthirdentityactingasagatewaytofinancialnetworksordirectlytoabank7/13/98Copyright1998FrederickM.
Avolio64WheredowegofromhereOr,whatmoreisneeded7/13/98Copyright1998FrederickM.
Avolio65InfrastructureNeededPublicKeyInfrastructureKeycreationKeydistributionKeycertificationKeylookupKeyrevocationLocallyandGlobally7/13/98Copyright1998FrederickM.
Avolio66CertificatesAmessageName,e-mail,publickey-----BEGINPGPPUBLICKEYBLOCK-----Version:4.
5mQCNAjPmUEIAAAEEAMj14c0xswae9XfbMVQeDFq8OVf29+N1745Hey5vkYw7UZUn7K1ehDYK44W+f1Y/Ns4g3lFJNxuFRbPZXUPAc8dlPiBR1xq+wqcoOIm+gpQEd5Dl1EgsUyE+3Si0WQ6zELRvKCWKww6/8egKDaMqQTgMqZFQEqjRFEvspjTJR9s3AAURtAt1c2VyQGRvbWFpbg===Cexv-----ENDPGPPUBLICKEYBLOCK-----7/13/98Copyright1998FrederickM.
Avolio67CertificateSignedbysomeonetrustworthyFredAvolioPublicKey:dhe34j3ffhhej3457/13/98Copyright1998FrederickM.
Avolio68SummaryandReview7/13/98Copyright1998FrederickM.
Avolio69EncryptionUsesEncryptionistheencodingofinformationandcanbeusedatmanydifferentpoints:–Fileencryptionforstorage(e.
g.
.
,forlaptops)–PrivateE-mail–DigitalsignaturesforDoctorOrders–Integritycheckingforchangestopatientrecords–EncrypteddataintransitRoutertorouterencryptionFirewalltofirewallencryptionattheIPlevel7/13/98Copyright1998FrederickM.
Avolio70EncryptionApplicationsAccessControl–UsecryptographicfunctionstodistributeaccesscontrollistsandprivilegesAuthentication–DigitalSignaturesprovidepositiveproofofidentity–Digitalcertificatesusedtobindpublickeytophysicalidentity7/13/98Copyright1998FrederickM.
Avolio71EncryptionApplicationsNon-repudiation–CryptographicfunctionsusetoprovideunforgeableproofofreceiptorauthorshipAvailability–Combinationofapplicationsusedtoreducethechancesofdenialofserviceormalicioussystemoutages7/13/98Copyright1998FrederickM.
Avolio72BasicToolsofCryptographySymmetricencryption–ProvidessecrecyamongpartieswhoshareacommonkeyMessageauthenticationcodes–ProvidesintegritycheckingandauthenticationPublic-keyencryption–Allowssomeonetoreceivesecretmessagefrompeoplehe'snevermet–AllowsmethodofexchangingsecretkeysDigitalsignatureschemes–Establishesintegrity,authenticity,andnon-repudiationSecurehashfunctions–UsedtoreduceamessagetoafixedsizeforsignatureFromInternetSecuritypresentationatWICSbyBruceSchneier73PracticalCryptography:AnOverviewFrederickM.
Avolio
Avolio,independentsecurityconsultantSUMMARYOFTOPICS:UpFront—DefiningTermsBasicsofCryptography—typesandmethods,Applications—PrivateMessaging(E-mail)FilesandDirectoriesStrongUserAuthenticationVirtualPrivateNetworksWebSitesElectronicCommerceNextSteps1PracticalCryptography:AnOverviewFrederickM.
Avolio7/13/98Copyright1998FrederickM.
Avolio2Shameless(butbrief)MarketingAvolioConsulting,http://www.
avolio.
com/–NetworkandcomputersecurityTrainingPolicyandProceduredevelopmentProductReviewandAnalysis–ProductMarketing,technicalassistance–E-mailsystemdesign,configuration,andtraining–Writing:whitepapers,tutorials,productreviews7/13/98Copyright1998FrederickM.
Avolio3SyllabusDefiningTermsBasicsofCryptographyPrivateMessaging(E-mail)FilesandDirectoriesStrongUserAuthenticationVirtualPrivateNetworksWebSitesElectronicCommerce7/13/98Copyright1998FrederickM.
Avolio4DefiningTermsConcernFraudUnauthorizedaccessSnoopingMessageAlterationDisavowalRequirementAuthenticationAuthorizationPrivacyDataIntegrityNon-RepudiationFromUnderstandingDigitalSignaturesbyGailGrant,McGraw-Hill,19977/13/98Copyright1998FrederickM.
Avolio5AuthenticationandIntegrityGuaranteetoReceiverKnowsidentityofsenderMessagenotalteredNotundulydelayedFromInternetSecuritypresentationatWICSbyWhitDiffie7/13/98Copyright1998FrederickM.
Avolio6PrivacyorConfidentialityGuaranteetoSenderAuthorizedreceiversonlyFromInternetSecuritypresentationatWICSbyWhitDiffie7/13/98Copyright1998FrederickM.
Avolio7BusinessNeedsforCryptoPrivacyMostbusinesses(andgovernments)don'tneedlong-termsecurityMailinglists,businessplans,negotiations,productR&DCommerceprivacyneedsaremoderateFinancialinformationmightneedtobesecureforadecadeExceptionsareembarrassments:personal,political,businessFromInternetSecuritypresentationatWICSbyBruceSchneier7/13/98Copyright1998FrederickM.
Avolio8BusinessNeedsforCryptoAuthenticationAuthenticatingsessionsversustransactionsNeedforaudittraildependsonapplicationAudittrailmustbeusableincourtwhilenotcompromisingthefuturesecurityofthesystemFromInternetSecuritypresentationatWICSbyBruceSchneier7/13/98Copyright1998FrederickM.
Avolio9BasicCryptographySecretkeyorsymmetricencryptionPublickeyorassymmetricencryptionOne-wayhashfunctions7/13/98Copyright1998FrederickM.
Avolio10EncryptionSecret-Key(Symmetric)Nowisthetimeforallgoodmen.
.
.
sd84$2*q}59(o32nvt-=gf]|@l^.
.
.
DecryptionEncryptionNowisthetimeforallgoodmen.
.
.
7/13/98Copyright1998FrederickM.
Avolio11EncryptionSecret-Key(Symmetric)BobencryptshismessagestoTedwiththeirsharedsecretkeyTeddecryptsmessagesfromBobwiththesamesecretkey.
7/13/98Copyright1998FrederickM.
Avolio12EncryptionSecret-Key(Symmetric)BobdecryptsTed'smessagesusingtheirsecretkey.
TedsendsmessagesbacktoBobwiththesamesecretkey.
7/13/98Copyright1998FrederickM.
Avolio13EncryptionPublic-Key(Asymmetric)Nowisthetimeforallgoodmen.
.
.
sd84$2*q}59(o32nvt-=gf]|@l^.
.
.
DecryptionEncryptionNowisthetimeforallgoodmen.
.
.
7/13/98Copyright1998FrederickM.
Avolio14EncryptionPublic-Key(Asymmetric)Carol,Ted,Bob,andAliceposttheirpublickeysandkeeptheirprivatekeyssecret7/13/98Copyright1998FrederickM.
Avolio15EncryptionPublic-Key(Asymmetric)TedBobAliceCarol'sPublicKeyCarol'sPublicKeyCarol'sPublicKeyCaroldecryptsthesemessagesusingherprivatekey7/13/98Copyright1998FrederickM.
Avolio16EncryptionPublic-Key(Asymmetric)Ted'spublickeyBob'spublickeyAlice'spublickeyCarolrepliestomessagesusingeachrecipient'spublickeyTedBobAliceTed'sprivatekeyBob'sprivatekeyAlice'sprivatekey7/13/98Copyright1998FrederickM.
Avolio17HashFunctionsConvertsastringofdataofanysizeintoafixed-lengthhashNowaytogobackwardsE.
g.
,afingerprintChancesofanytwostringsofdatahashingtothesamevaluevery,verysmall.
Thisisveryimportant!
7/13/98Copyright1998FrederickM.
Avolio18HashFunctionsMD5Messagetextofarbitrarysize.
.
.
MessageTextHashofMessageofshort,fixedsize7/13/98Copyright1998FrederickM.
Avolio19SecurityProblemsSolvedbyCryptographyPrivacyofstoreddata,messages,andconversationsSecureelectroniccommerceTransactionnon-repudiationUseranddataauthenticationE-mailsecurityMulti-partycontrolSecureauditlogsFromInternetSecuritypresentationatWICSbyBruceSchneier7/13/98Copyright1998FrederickM.
Avolio20ApplicationExamplesE-mailUserAuthenticationPrivacyforFilesandDirectoriesVirtualPrivateNetworksWebSiteSecurity7/13/98Copyright1998FrederickM.
Avolio21PrivateE-mailTheGoalsConfidentialityAuthenticationNon-repudiationSecuringE-mailaswellorbetterthanpostalmail!
7/13/98Copyright1998FrederickM.
Avolio22IntegrityandAuthentication1.
MessageSignatureMD5RSANowisthetimeforallgoodmen.
.
.
Sender'sPrivateKeyMessageTextHashofMessage7/13/98Copyright1998FrederickM.
Avolio23IntegrityandAuthentication2.
DatatoSendNowisthetimeforallgoodmen.
.
.
MessageSignatureMessageText7/13/98Copyright1998FrederickM.
Avolio24DigitallySignedMessageTO:sysadminFrom:avolio@tis.
com-----BEGINPGPSIGNEDMESSAGE-----PleasecompletethedeploymentofthePGPsoftwaretoallemployees.
Fred,CSO-----BEGINPGPSIGNATURE-----Version:4.
5iQCVAgUBM+ZICTGr72+Les/dAQHmhwP/WorAeL6LzTJJre6lU77oPkNxYS+izmnM1ozOHxVD6pDlEu7pgsju0g3yRO6tKxN4uJRW5ZeOUtVEgBw+dgFptuOSD9cmDAgSw3SAEFwp9C6cPO0L9MMbc+eps3w8GKLlZkYRZPuANom0ggbmRpqDkjMIU25yEUr5Vj/P54ZuaRY==zu3P-----ENDPGPSIGNATURE--—7/13/98Copyright1998FrederickM.
Avolio25IntegrityandAuthenticationHowcananyonevalidateintegrityandauthenticatesenderMD5RSASender'sPublicKeyCompareRSANowisthetimeforallgoodmen.
.
.
MessageTextMessageSignature7/13/98Copyright1998FrederickM.
Avolio26TO:sysadminFrom:avolio@tis.
com-----BEGINPGPSIGNEDMESSAGE-----PleasecompletethedeploymentofthePGPsoftwaretoallemployees.
Fred,CSO-----BEGINPGPSIGNATURE-----Version:4.
5iQCVAgUBM+ZICTGr72+Les/dAQHmhwP/WorAeL6LzTJJre6lU77oPkNxYS+izmnM1ozOHxVD6pDlEu7pgsju0g3yRO6tKxN4uJRW5ZeOUtVEgBw+dgFptuOSD9cmDAgSw3SAEFwp9C6cPO0L9MMbc+eps3w8GKLlZkYRZPuANom0ggbmRpqDkjMIU25yEUr5Vj/P54ZuaRY==zu3P-----ENDPGPSIGNATURE--—CheckingaSignedMessage7/13/98Copyright1998FrederickM.
Avolio27EncryptionHybridSystemsSymmetrickeyisfastforencryption,butdistributingkeysisdifficultPublickeyisgoodforkeydistribution,butslowatencryptionSolution:usepublickeycryptoasasecuremeansofdistributingthekeysforsymmetricencryption7/13/98Copyright1998FrederickM.
Avolio28AddingPrivacy1.
EncryptedMessageDESRandomkeyNowisthetimeforallgoodmen.
.
.
s5%lk)@slm#]l0|;k^nb[wepqs.
.
.
MessageText7/13/98Copyright1998FrederickM.
Avolio29AddingPrivacy2.
RandomkeyEncryptedkeyRSARecipient'sPublicKey7/13/98Copyright1998FrederickM.
Avolio30AddingPrivacy3.
MD5RSANowisthetimeforallgoodmen.
.
.
Sender'sPrivateKeyMessageSignatureMessageText7/13/98Copyright1998FrederickM.
Avolio31AddingPrivacy4.
EncryptedMessageDatatoSendEncryptedkeys5%lk)@slm#]l0|;k^nb[wepqs.
.
.
MessageSignature7/13/98Copyright1998FrederickM.
Avolio32AddingPrivacyHowcantherecipient(andonlytherecipient)decrypt–DESkeyisencryptedwithrecipientspublickey–Recipientdecryptswithprivatekey(onlyrecipienthasthis)–DESkeyisappliedtoencryptedmessage–Theresultistheclear-textmessage7/13/98Copyright1998FrederickM.
Avolio33SampleEncryptedMessageDate:Tue,08Jul199716:39:25-0400To:user@domainFrom:FrederickMAvolio-----BEGINPGPMESSAGE-----hIwCMavvb4t6z90BA/42UOAdWvnzfhRG2xXyYe203CISLsn2O39vM/y640hNbSl7U29aNGZFfLMRGn7eLZG43SWwBz4cHjphG6iAzeLftRgHkLggxXA9VpGki5PyNID9B0rk4TpRVE3qzgTbdio69aMlK6BdAQ4zWkyxSCi0oR3Vpnh+VVZyOVyaX8etlYRMAvUTsuDYCkr1AQH+OlA4ntqhxoPP/SJpKm5ugMLYiiij8ak8V90a8IYMkYB0CzMrliOJ6ZZxQm1x8orgjL/6Bm5EoSvN4eCCeA/xXKYAAAHXLhG47kVhJkjlPrI/U/sr2aQEm6r+aU1s0ziU1LxF2c5DAW6cD5b4xH+EbvYrnQQJClNMh9y03SjviXvnqFDCO4M70u3iLC50+em4PouqM1DZdoW8O5pb=vhFx-----ENDPGPMESSAGE-----7/13/98Copyright1998FrederickM.
Avolio34Date:Tue,08Jul199716:39:25-0400To:user@domainFrom:FrederickMAvolio-----BEGINPGPMESSAGE-----hIwCMavvb4t6z90BA/42UOAdWvnzfhRG2xXyYe203CISLsn2O39vM/y640hNbSl7U29aNGZFfLMRGn7eLZG43SWwBz4cHjphG6iAzeLftRgHkLggxXA9VpGki5PyNID9B0rk4TpRVE3qzgTbdio69aMlK6BdAQ4zWkyxSCi0oR3Vpnh+VVZyOVyaX8etlYRMAvUTsuDYCkr1AQH+OlA4ntqhxoPP/SJpKm5ugMLYiiij8ak8V90a8IYMkYB0CzMrliOJ6ZZxQm1x8orgjL/6Bm5EoSvN4eCCeA/xXKYAAAHXLhG47kVhJkjlPrI/U/sr2aQEm6r+aU1s0ziU1LxF2c5DAW6cD5b4xH+EbvYrnQQJClNMh9y03SjviXvnqFDCO4M70u3iLC50+em4PouqM1DZdoW8O5pb=vhFx-----ENDPGPMESSAGE-----SampleEncryptedMessage7/13/98Copyright1998FrederickM.
Avolio35SampleEncryptedMessageTO:user@domainFrom:avolio@tis.
comWehavedeployedthePGPmailsoftwareandhavecompletedtraining.
Fred7/13/98Copyright1998FrederickM.
Avolio36SampleEncryptedMessageTO:user@domainFrom:avolio@tis.
comWehavedeployedthePGPmailsoftwareandhavecompletedtraining.
Fred7/13/98Copyright1998FrederickM.
Avolio37FilesandDirectoriesTheGoalsSealdatafilesfromunauthorizedaccessoralteration(reading,writing,etc.
)7/13/98Copyright1998FrederickM.
Avolio38FilesandDirectoriesSimilartoE-mailconcernsandsolutionsEncryptafilewithasymmetrickeyEncryptafilewithYOURpublickeyLikelockingdrawersinadeskoffilecabinetDesertStorm…7/13/98Copyright1998FrederickM.
Avolio39FilesandDirectories7/13/98Copyright1998FrederickM.
Avolio40FilesandDirectoriesNeedtobebuiltintofilesystemNeedtobebuiltintoapplicationsOpen—automaticallydecryptifencryptedClose—automaticallyencryptifwasencrypted(anddeletecleartext)Closewithencrypt7/13/98Copyright1998FrederickM.
Avolio41StrongUserAuthenticationThegoals"Toestablishthevalidityofaclaimedidentityortoprovideprotectionagainstfraudulenttransactionsbyestablishingthevalidityof.
.
.
[the]individual.
.
.
"—NCSC"RedBook"Toidentifyinawaythatisnotvulnerabletoareplayattack7/13/98Copyright1998FrederickM.
Avolio42ReplayAttackUsername:fredPassword:lisa%7/13/98Copyright1998FrederickM.
Avolio43Stronguserauthentication–SmartcardsortokensSoftware(server)andsmartcardbasedPIN-protectedsmartcardprivatekeySystemissueschallengebasedonuserUserusespasswordtounlocksmartcard,whichreadschallenge,calculatescryptographicresponseResponseisusedasresponsetochallengeAuthenticationTechniques7/13/98Copyright1998FrederickM.
Avolio44AuthenticationTechniquesChallenge:"876261"ServersendsUser"unlocks"authenticationtokenbykeyinginPersonalIdentificationNumberUserenterschallengeintoauthenticationtokenTokenreturnsanencryptedresponsetothechallenge"722512""1105""876261"UserrespondstoserverwithuniqueresponseServercomparesresponse"722512"(Serverandtokenshareasecretencryptionkeythatuserneverhasaccessto)(Secretkey:"0x8A5F42")7/13/98Copyright1998FrederickM.
Avolio45VirtualPrivateNetworksThegoalsPrivacyofcommunicationbetweensecureenclavesoveranuntrustednetworkPrivacyandaccessforremoteemployeesPrivacyandcontrolledaccessforremoteclients7/13/98Copyright1998FrederickM.
Avolio46Encryption—"VirtualPrivateNetworks"and"VirtualNetworkPerimeters"LANALANALANBLANBPrivacy7/13/98Copyright1998FrederickM.
Avolio47VirtualPrivateNetworksFirewall-to-firewallconnectionsovertheInternet.
Usingencrypted"tunnels"overtheInternettoconnectLANsandWANscanreducecosts23-50%(USComputerMarch1996).
SecureWideAreaNetworking(S/WAN).
IPv6,end-to-endencryption,IPSECFirewall-to-firewallconnectionsovertheInternet.
Usingencrypted"tunnels"overtheInternettoconnectLANsandWANscanreducecosts23-50%(USComputerMarch1996).
SecureWideAreaNetworking(S/WAN).
IPv6,end-to-endencryption,IPSEC7/13/98Copyright1998FrederickM.
Avolio48ExtendingthePerimeterPublicNetworkVirtualNetworkPerimeter7/13/98Copyright1998FrederickM.
Avolio49GlobalVPNsKeyIssues–TheInternetisaworldwidenetwork–Companiescrossinternationalboundries–Partnershipscrossinternationalboundries–Privacyinbusinesstransactionsiscriticaltosuccess–NetworkcommunicationsprivacymeansemployingencryptionKeyIssues–TheInternetisaworldwidenetwork–Companiescrossinternationalboundries–Partnershipscrossinternationalboundries–Privacyinbusinesstransactionsiscriticaltosuccess–Networkcommunicationsprivacymeansemployingencryption7/13/98Copyright1998FrederickM.
Avolio50GlobalVPNsEncryptionRequirementsStrong(56bitorbetterkeylength)ExportablePlatformindependentEncryptionRequirementsStrong(56bitorbetterkeylength)ExportablePlatformindependent7/13/98Copyright1998FrederickM.
Avolio51WebSiteSecurityThegoalsDeploymentofwebsitesforinternalandexternaluseProtectionfrommodificationAssurancedatahasnotbeenmodifiedControlofaccess7/13/98Copyright1998FrederickM.
Avolio52WebSiteSecurityWebsiteattacksCIADOJNASAUSAFSingaporeGovernmentNationofIslamMGMStudios7/13/98Copyright1998FrederickM.
Avolio53WebSiteSecurityMessagehashofallfilesonwebsitekept–Periodiccheckingofstoredhashagainsthashofpages—integritycheckingDigitallysignpages,documents,software–Assuranceforusersthatdatahasnotbeenmodified7/13/98Copyright1998FrederickM.
Avolio54WebSiteSecurityControlledaccess–Stronguserauthentication–Usernameandpasswordoverprotectedchannel7/13/98Copyright1998FrederickM.
Avolio55WebSiteSecurityftp://info.
cert.
org/pub/cert_advisories/CA-97.
20.
javascript:-----BEGINPGPSIGNEDMESSAGE-----CERT*AdvisoryCA-97.
20Originalissuedate:July8,1997Lastrevised:July28,1997,AppendixA-addedinformationforHewlett-PackardandIBM.
SectionIII.
A-slightwordingchange.
Acompleterevisionhistoryisattheendofthisfile.
Topic:JavaScriptVulnerability…-----BEGINPGPSIGNATURE-----Version:2.
6.
2iQCVAwUBM9yyN3VP+x0t4w7BAQFLAgP/Z1moGK6SI2Q3OBbV/fpCOcW2J9TdXE3/UHuZ7vHCjKDWxelHr5551JQ9i19s6sVBNDOX1W031IrlS36nIblp3vX4rVuAaufwVOxqxYg44i3gxsC8NgC/HW5j7KHsOiGzoRmU5a+vWyLmmged+Y2wBDrxGeqbHacE4S6FPph4/w8==5MP2-----ENDPGPSIGNATURE-----7/13/98Copyright1998FrederickM.
Avolio56E-CommerceTransactionsecurity–Privacyofasale–IntegrityofasaleElectronicpayment–Privacy–Integrity–ProvenanceofanagreementtotransferfundsFromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,19977/13/98Copyright1998FrederickM.
Avolio57TransactionSecurityVirtualPrivateNetworkapproach–Encryptionandauthenticationdoneaspartofthenetworkcommunication–Networksoftwaremustbemodified–UsersneednotmodifybehaviororapplicationsoftwareFromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,19977/13/98Copyright1998FrederickM.
Avolio58TransactionSecurityApplication-levelencryption–OSandplatformindependent–Nodataisexposedbetweenclientandserversoftware–MostwebbrowsersareusingthistypeofsecuritySSL,SHTTPFromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,19977/13/98Copyright1998FrederickM.
Avolio59TransactionSecurityApplication-levelencryption–Browserandservershakehandsanddecideonencryptionschemeandkey–Dataistransmittedencryptedwiththekey–Theyshakehandsattheend.
FromWebSecuritySourcebookbyRubin,atal,JohnWiley&Sons,1997ThisisthemeaningofthefilledinkeyontheNetscapebrowsers.
7/13/98Copyright1998FrederickM.
Avolio60TransactionSecurityMoste-commercetodayusesapplication-leveltransactionsecurityMosttransactionsecuritytodayprotectsprivacyofthedatasentfromtheclient–Orderblanksorquestionnaires–CreditCardnumbersMoste-commerceontheInternettodayisliketelephonecatalogorderingwithoutthecatalogortelephone7/13/98Copyright1998FrederickM.
Avolio617/13/98Copyright1998FrederickM.
Avolio627/13/98Copyright1998FrederickM.
Avolio63ElectronicPaymentSecurepaymentprotocolsexistMostinvolveatrustedthirdentityactingasagatewaytofinancialnetworksordirectlytoabank7/13/98Copyright1998FrederickM.
Avolio64WheredowegofromhereOr,whatmoreisneeded7/13/98Copyright1998FrederickM.
Avolio65InfrastructureNeededPublicKeyInfrastructureKeycreationKeydistributionKeycertificationKeylookupKeyrevocationLocallyandGlobally7/13/98Copyright1998FrederickM.
Avolio66CertificatesAmessageName,e-mail,publickey-----BEGINPGPPUBLICKEYBLOCK-----Version:4.
5mQCNAjPmUEIAAAEEAMj14c0xswae9XfbMVQeDFq8OVf29+N1745Hey5vkYw7UZUn7K1ehDYK44W+f1Y/Ns4g3lFJNxuFRbPZXUPAc8dlPiBR1xq+wqcoOIm+gpQEd5Dl1EgsUyE+3Si0WQ6zELRvKCWKww6/8egKDaMqQTgMqZFQEqjRFEvspjTJR9s3AAURtAt1c2VyQGRvbWFpbg===Cexv-----ENDPGPPUBLICKEYBLOCK-----7/13/98Copyright1998FrederickM.
Avolio67CertificateSignedbysomeonetrustworthyFredAvolioPublicKey:dhe34j3ffhhej3457/13/98Copyright1998FrederickM.
Avolio68SummaryandReview7/13/98Copyright1998FrederickM.
Avolio69EncryptionUsesEncryptionistheencodingofinformationandcanbeusedatmanydifferentpoints:–Fileencryptionforstorage(e.
g.
.
,forlaptops)–PrivateE-mail–DigitalsignaturesforDoctorOrders–Integritycheckingforchangestopatientrecords–EncrypteddataintransitRoutertorouterencryptionFirewalltofirewallencryptionattheIPlevel7/13/98Copyright1998FrederickM.
Avolio70EncryptionApplicationsAccessControl–UsecryptographicfunctionstodistributeaccesscontrollistsandprivilegesAuthentication–DigitalSignaturesprovidepositiveproofofidentity–Digitalcertificatesusedtobindpublickeytophysicalidentity7/13/98Copyright1998FrederickM.
Avolio71EncryptionApplicationsNon-repudiation–CryptographicfunctionsusetoprovideunforgeableproofofreceiptorauthorshipAvailability–Combinationofapplicationsusedtoreducethechancesofdenialofserviceormalicioussystemoutages7/13/98Copyright1998FrederickM.
Avolio72BasicToolsofCryptographySymmetricencryption–ProvidessecrecyamongpartieswhoshareacommonkeyMessageauthenticationcodes–ProvidesintegritycheckingandauthenticationPublic-keyencryption–Allowssomeonetoreceivesecretmessagefrompeoplehe'snevermet–AllowsmethodofexchangingsecretkeysDigitalsignatureschemes–Establishesintegrity,authenticity,andnon-repudiationSecurehashfunctions–UsedtoreduceamessagetoafixedsizeforsignatureFromInternetSecuritypresentationatWICSbyBruceSchneier73PracticalCryptography:AnOverviewFrederickM.
Avolio
- 2.www.k8k8.com相关文档
- Moderatewww.k8k8.com
- recipientswww.k8k8.com
- Packagewww.k8k8.com
- Completewww.k8k8.com
- PHYwww.k8k8.com
- Engineer-to-Engineer
咖啡主机22元/月起,美国洛杉矶弹性轻量云主机仅13元/月起,高防云20G防御仅18元/月
咖啡主机怎么样?咖啡主机是一家国人主机销售商，成立于2016年8月，之前云服务器网已经多次分享过他家的云服务器产品了，商家主要销售香港、洛杉矶等地的VPS产品，Cera机房 三网直连去程 回程CUVIP优化 本产品并非原生地区本土IP，线路方面都有CN2直连国内，机器比较稳定。咖啡主机目前推出美国洛杉矶弹性轻量云主机仅13元/月起,高防云20G防御仅18元/月;香港弹性云服务器，香港HKBN CN...
DMIT（季度$28.88）调整洛杉矶CN2 GIA优化端口
对于DMIT商家已经关注有一些时候，看到不少的隔壁朋友们都有分享到，但是这篇还是我第一次分享这个服务商。根据看介绍，DMIT是一家成立于2017年的美国商家，据说是由几位留美学生创立的，数据中心位于香港、伯力G-Core和洛杉矶，主打香港CN2直连云服务器、美国CN2直连云服务器产品。最近看到DMIT商家有对洛杉矶CN2 GIA VPS端口进行了升级，不过价格没有变化，依然是季付28.88美元起。...
杭州王小玉网-美国CERA 2核8G内存19.9元/月，香港，日本E3/16G/20M CN2带宽150元/月，美国宿主机1500元，国内宿主机1200元
官方网站：点击访问王小玉网络官网活动方案：买美国云服务器就选MF.0220.CN 实力 强 强 强！！！杭州王小玉网络 旗下 魔方资源池 “我亏本你引流活动 ” mf.0220.CNCPU型号内存硬盘美国CERA机房 E5 2696v2 2核心8G30G总硬盘1个独立IP19.9元/月 续费同价mf.0220.CN 购买湖北100G防御 E5 2690v2 4核心4G...
www.k8k8.com为你推荐
-
bbs.99nets.com怎么把电脑的IP设置和路由器一个网段同ip站点同IP做同类站好吗？8090lu.com8090看看电影网怎么打不开了www.765.com有没好的学习网站www.javmoo.comjavimdb怎么看www.mywife.ccmywife哪部最经典partnersonline电脑内一切浏览器无法打开广告法有那些广告法？还有广告那些广告词？www.javlibrary.com跪求一个JAVHD.com的帐号hao.rising.cn瑞星强制篡改主页 HTTP://HAO.RISING.CN 各位有什么办法可以解决吗？