【摘要】 随着Internet的迅速发展和广泛应用,网络与信息安全的重要性和紧迫性日益突出。Netscape公司提出了安全套接层协议SSL(SecureSocketLayer),该协议基于公开密钥技术,可保证两个实体间通信的保密性和可靠性,是目前Internet上保密通信的工业标准。文章介绍了该协议的基本原理和工作过程,对协议的安全性进行分析,进而指出了目前SSL3.0存在的几个缺陷,并在此基础上提出改进的方法。更多还原

【Abstract】 With the development and wide application of Internet, the security of network and information is becoming more and more important and urgent. The Secure Socket Layer(SSL) protocol,which has been invented by Netscape Company, is based on the public-key technique,and it can insure the secrecy and security of communication between two entities,so the SSL protocol is the current industrial standard of secret communication on Internet. In this paper,the principle and working process of the SSL protocol are introduced, the security of the protocol is analyzed, several vulnerabilities of the current SSL3.0 protocol are discussed in detail and some improvement suggestions also given.更多还原