Internet Security Protocols: Protecting IP Traffic [Hardcover]

Uyless D. Black (Author)

Book Description

ISBN-10: 0130142492 | ISBN-13: 978-0130142498 | Publication Date: July 24, 2000 | Edition: 1st

This is a complete networking professional's guide to providing end-to-end Internet security where it matters most: at the packet level. World-recognized networking consultant Uyless Black covers every essential Internet security protocol, and virtually every IP application, including data, voice, multicast, and video. Black begins by reviewing the key security risks associated with the Internet and Internet applications, including risks to privacy, secrecy, and confidentiality; risks to the integrity of information and accurate authentication; and the need for access control and non-repudiation of transactions. Understand the role of firewalls and security policies and procedures; then review each key Internet security protocol. Black covers dial-in authentication including RADIUS and DIAMETER; VPN IPSec security; the Internet Key Distribution, Certification, and Management system (ISAKMP); Internet Key Exchange; and more. The book includes detailed coverage of security in mobile networks, and explains how Diffserv can be used to establish different levels of security for different types of traffic. For all experienced networking and communications professionals.

Editorial Reviews

Amazon.com Review

Secure transmission of data over public and semipublic Internet Protocol (IP) networks is essential to organizations that are geographically distributed. Such companies rely on the ability of road warriors to connect transparently to local area network (LAN) resources across the Internet via a virtual private network (VPN), and require fixed resources to be able to communicate securely and inexpensively. Respected networking author Uyless Black explains certain aspects of the state of the art in secure IP data communications in Internet Security Protocols: Protecting IP Traffic. For the most part, he endeavors to explain network-security concepts at a systems-engineering level, leaving the details of implementation of specific environments to more specialized books.

In explaining an aspect of IP security, Black typically opens with a statement of what the protocol or technology at hand is good for, examining how it fits with other elements of IP security and citing relevant standards documents. From there, he moves on to how the technology works, typically with the help of conceptual schematics and packet diagrams. Special features receive focused discussion, and usually you'll find a couple of annotated diagram sequences to help clarify what happens in specific applications of the technology. There also are fine explanations of such widely applicable techniques as public-key cryptography and certification authorities. Read this book for its conceptual clarity; back it up with another security text that addresses the administration-level specifics of your operating environment. --David Wall

Topics covered: Protocols and techniques for securing Internet Protocol (IP) data communications, including Point-to-Point Protocol (PPP) and several of its more secure variants, as well as dial-in security provided by Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), Remote Authentication Dial-In User Service (RADIUS), and Diameter. The IPSec specification is dissected; and there's coverage of Public Key Infrastructures (PKI), although not of Kerberos. Key exchange with Internet Key Exchange (IKE) and Internet Security Association and Key Management Protocol (ISAKMP) is discussed, too.

From the Inside Flap

Preface

This book is one in a series of books called, "Advanced Communications Technologies." As the name of the book implies, the focus is on the Internet architecture and the principal protocols that make up this architecture. The book is an expansion of Advanced Features of the Internet, also part of this series.

The book has been written for this series to act as the introduction to the other more advanced Internet topics. As such, it is written for the person who is new to the Internet protocols, but it assumes the reader has had some experience in data communications.

I hope you find this book a valuable addition to your library.Acknowledgments

I have relied on examples from several organizations and individuals for some of my explanations. I would like to thank Buck Graham once again, who has written TCP/IP Addressing, published by AP Professional. It is the best book on the market on IP addressing and subnet addressing. I would also like to thank the authors of Fast Ethernet, Liam B. Quinn and Richard G. Russell (John Wiley & Sons, Inc), and Internet Routing Architectures, by Bassam Halabi, and published by Cisco Press. I cite these authors in the appropriate parts of the book.

I have relied on the Internet Request for Comments (RFCs), published by the Internet Society, and I thank this organization for making the RFCs available to the public.

For all the Internet standards and draft standards the following applies:

Copyright (c) The Internet Society (1998). All Rights Reserved.

This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain itor assist in its implementation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English.

The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns.

See all Editorial Reviews

Product Details

• Hardcover: 304 pages
• Publisher: Prentice Hall PTR; 1st edition (July 24, 2000)
• Language: English
• ISBN-10: 0130142492
• ISBN-13: 978-0130142498
• Product Dimensions: 9 x 7.2 x 1.1 inches
• Shipping Weight: 1.6 pounds
• Average Customer Review: 2.8 out of 5 stars  See all reviews (4 customer reviews)
• Amazon Best Sellers Rank: #2,511,063 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

7 of 9 people found the following review helpful:

1.0 out of 5 stars Misleading book, November 17, 2000

By 

Romel Khan (Eatontown, NJ USA) - See all my reviews

This review is from: Internet Security Protocols: Protecting IP Traffic (Hardcover)

The book's name is "Internet Security Protocols" and it does not even mention SSL

1 of 1 people found the following review helpful:

4.0 out of 5 stars Good book, even though it is not complete. Very easy to read, February 9, 2002

By A Customer

This review is from: Internet Security Protocols: Protecting IP Traffic (Hardcover)

A subject matter as complex as IPSec, PKI, and IKE, Grant does a very good job of explaining, where other authors have made the subject very dry and difficult reading.

He does miss TLS/SSL, which you would think he would cover given the tittle of the book.

1 of 2 people found the following review helpful:

5.0 out of 5 stars Great resource for any Security specialist., May 28, 2001

By 

Nigel J Clarke (Jamaica, New York United States) - See all my reviews

This review is from: Internet Security Protocols: Protecting IP Traffic (Hardcover)

I'm not sure if the other readers understood the content in this book, but it is a valuable resource. There is a wide range of security related protocols on the internet, this book can't cover all of them.

On page 49 it states " the attractive aspect to PGP is that is speeds up the process considerably. And Paul Zimmerman, the author of PGP, came up with this novel idea." This sounds like the author know who Zimmerman was, and gave him a compliment.

As far as SSL not being covered...look @ the topics covered. This will help you to understand what protocols the author has covered. If you're looking for information on protocols not mentioned in the "topics covered" you will need to purchase another book ;-)

If you're interested in understanding the internals of IPsec and you can't decipher the hyrogliphic type RFCs, this is for you.