Phía máy khách an ninh đề với sự an toàn từ hệ thống máy tính để bàn của khách hàng đến máy chủ thương mại điện tử. Điều này một phần của hệ thống bao gồm máy tính của khách hàng và phần mềm trình duyệt và liên kết các thông tin liên lạc đến máy chủ (xem hình 11-1). | Chapter 11 E-Commerce Security Needs 189 CLIENT-SIDE SECURITY Client-side security deals with the security from the customer s desktop system to the e-commerce server. This part of the system includes the customer s computer and browser software and the communications link to the server see Figure 11-1 . Within this part of the system we have several issues The protection of information in transit between the customer s system and the server The protection of information that is saved to the customer s system The protection of the fact that a particular customer made a particular order Communications Security Communications security for e-commerce applications covers the security of information that is sent between the customer s system and the e-commerce server. This may include sensitive information such as credit card numbers or site passwords. It may also include confidential information that is sent from the server to the customer s system such as customer files. Information stored on Communication the system Prevent security Prevent denying the transaction Figure 11-1. Client-side security components 190 Network Security A Beginner s Guide There is one realistic solution to this encryption. Most standard Web browsers include the ability to encrypt traffic. This is the default solution if HTTPS is used rather than HTTP. When HTTPS is used a Secure Socket Layer SSL connection is made between the client and the server. All traffic over this connection is encrypted. I want to take a minute here and talk about the length of the SSL key. Chapter 12 has a more detailed discussion on encryption algorithms and key length. The SSL key can be 40 or 128 bits in length. The length of the key directly affects the time and effort required to perform a brute-force attack against the encrypted traffic and thus gain access to the information. Given the risks associated with sending sensitive information over the Internet it is certainly a good idea to use encryption. However .
