Module 1: The
House of Security
• Security principles for e-commerce
• Digital authentication
• Data integrity across the Internet
• Non-repudiation criteria
• Creating a digital identity
• The concept of a certification authority
• The legal and procedural environment
Module 2: Basic cryptography
• Early cryptography
• Cryptographic techniques
• Common symmetric key algorithms
• Data Encryption Standard (DES)
• Ideal cryptographic system
Module 3: Asymmetric cryptography and digital
signatures
• Diffie-Hellman key exchange
• Public key cryptography
• RSA public key cryptography
• Signing electronic messages
• Message digests
Module 4: The role of digital certificates
• Need for digital certificates
• Public key substitution
• Basic certificate contents
• X.509 certificate attributes
• Assurance/cost trade-off
Module 5: PKI and certification authorities
• What is a public key infrastructure?
• Certification authority
• Certification practices statement
• Public vs. private certification authorities
• In-house, outsourced, hybrid solutions
• VeriSign Trust Network
Module 6: VeriSign Managed PKI
• Exploring the VeriSign Managed PKI solution
Module 7: Lifecycle management
• Issuing a certificate
• Key escrow and recovery
• Certificate renewal
• Certificate revocation
Module 8: PKI standards
• X.509
• RSA’s role in standards (PKCS)
• Secure Sockets Layer, SSL (TLS)
• S/MIME
• Internet Protocol Security – IPSEC
Module 9: Infrastructure
• LDAP
• Smart cards
• Software based roaming solutions
• Active directory
• Kerberos
• PKI toolkits
Module 10: Advanced product integration
• Go Secure! products |