Wap Security Arch Presentation

A Survey of WAP Security Architecture Neil Daswani [email_address]

Overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Security Basics ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Security Basics ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Wireless Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Need for App Level Security ,[object Object],[object Object],[object Object]

Basic WAP Architecture Internet Gateway Web Server WTLS SSL

WTLS & SSL ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

WTLS: Class 1 ,[object Object],ClientHello -----------> ServerHello <----------- ServerHelloDone ClientKeyExchange ChangeCipherSpec Finished -----------> <----------- Finished Application Data <----------> Application Data

WTLS: Class 2 ,[object Object],ClientHello -----------> ServerHello Certificate <----------- ServerHelloDone ClientKeyExchange ChangeCipherSpec Finished -----------> <----------- Finished Application Data <----------> Application Data 1. Verify Server Certificate 2. Establish Session Key

[object Object],WTLS: Class 3 Client Hello -----------> ServerHello Certificate CertificateRequest <----------- ServerHelloDone Certificate ClientKeyExchange (only for RSA) CertificateVerify ChangeCipherSpec Finished -----------> <----------- Finished Application Data <----------> Application Data 1. Verify Server Certificate 2. Establish Session Key 3. Generate Signature

TLS/SSL vs. WTLS ,[object Object],[object Object],[object Object]

WAP Security Models ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Operator Hosts Gateway ,[object Object],Operator Content Provider Internet WAP/HDTP Gateway Web Server WTLS Class 1 or Encrypted HDTP SSL

Operator Hosts Gateway ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Operator Hosts Gateway ,[object Object]

Operator Hosts Gateway ,[object Object],[object Object],[object Object],[object Object],[object Object]

Content Provider Hosts Gateway ,[object Object],WAP Gateway Web Server WTLS Class 2 SSL Content Provider

Content Provider Hosts Gateway ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Content Provider Hosts Gateway ,[object Object],Internet WAP Gateway WTLS Class 2 SSL Operator Web Server SSL Content Provider WAP Gateway

Content Provider Hosts Gateway ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Restricting Gateway Access ,[object Object],[object Object],[object Object],[object Object],[object Object]

WIM: WAP Identity Module ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

WMLScript Crypto API ,[object Object],[object Object],[object Object],[object Object]

WML Access Control ,[object Object],[object Object],[object Object]

Summary ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

References ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Wap Security Arch Presentation

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (18)

Destaque

Destaque (20)

Semelhante a Wap Security Arch Presentation

Semelhante a Wap Security Arch Presentation (20)

Mais de Ram Dutt Shukla

Mais de Ram Dutt Shukla (20)

Último

Último (20)

Wap Security Arch Presentation