Security Technologies for the World Wide Web, Second Edition

Rolf Oppliger

Library of Congress Cataloging-in-Publication Data

Oppliger, Rolf.
       Security technologies for the World Wide Web/Rolf Oppliger. ”2nd ed.
             p. cm. ” (Artech House computer security library)
   Includes bibliographical references and index.
   ISBN 1-58053-348-5 (alk. paper)
       1. Computer security. 2. World Wide Web (Information retrieval system) ”Security measures
       I. Title II. Series.
   QA76.9.A.25 O67 2002
   005.8 ”dc21 2002032665

British Library Cataloguing in Publication Data

Oppliger, Rolf
   Security technologies for the World Wide Web. ”2nd ed. ” (Artech House computer security library)
   1. World Wide Web ”Security measures
   I. Title
   005.8

ISBN 1-58053-348-5

Cover design by Christine Stone

2003 ARTECH HOUSE, INC.
685 Canton Street
Norwood, MA 02062

Many screen shots in this book are copyright 2002 Microsoft Corporation (USA) or Opera Software ASA ( Norway). All rights reserved. These pages may not be reprinted or copied without express written permission of Microsoft or Opera Software.

Microsoft Corporation and Opera Software ASA have not authorized, sponsored, endorsed, or approved this publication and are not resposible for its content. Microsoft and the Microsoft corporate logos are trademarks and trade names of Microsoft Corporation. Similarly, Opera and Opera Software logos are trademarks and trade names of Microsoft Corporation. Similarly, Opera and Opera Software logos are trademarks and trade names of Opera Software ASA. All other product names and logos are trademarks of their respective owners .

All rights reserved. Printed and bound in the United States of America. No part of this book may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without permission in writing from the publisher.

All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Artech House cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

International Standard Book Number: 1-58053-348-5 Library of Congress Catalog Card Number: 2002032665

10    9    8    7    6    5    4    3    2    1

To my daughter , Lara

Acknowledgments

First, I want to express my thanks to all people who contributed to and were involved in the writing, publishing, and selling of the first edition of this book. Among these people, I am particularly grateful for the interest and support of Kurt Bauknecht, Dieter Hogrefe, Hansj ¼rg Mey, and G ¼nther Pernul. Also, I want to thank all buyers of the first edition; they have made it possible for me to update the book and to develop a second edition. Since publication of the first edition, many security professionals, colleagues, customers, and students have provided valuable comments, suggestions, pointers, and further material to me. I hope that this input was taken into proper consideration. Ruedi Rytz and my brother, Hans Oppliger, have been particularly helpful in finding mistakes and making the book more comprehensive and understandable. The same is true for John Yesberg, who has thoroughly reviewed the entire manuscript and provided many useful comments and hints. As with the first edition the staff at Artech House was enormously helpful in producing the second edition of this book. Among these people, I d like to thank Tim Pitts, Ruth Harris, Judi Stone, and Jen Kelland. Above all, I want to thank my family ”my wife Isabelle and our beloved children Marc and Lara ”for their encouragement, support, and patience during the writing of the book. Once again, they have tolerated the long writing hours into the night, the scattered papers and manuscripts, the numerous business trips, and many other inconveniences while I completed this edition of the book. Soon before the book went into production, our daughter Lara was born. Consequently, it is dedicated to her.

About the Author

Rolf Oppliger received his M.Sc. and Ph.D. degrees in computer science from the University of Berne, Switzerland, in 1991 and 1993, respectively. After spending one year as a postdoctoral researcher at the International Computer Science Institute (ICSI) in Berkeley, California, he joined the Swiss Federal Strategy Unit for Information Technology (FSUIT) in 1995, and continued his research and teaching activities at several universities and polytechnics in Switzerland and Germany. In 1999, he received the venia legendi from the University of Z ¼rich, Switzerland, became the Artech House series editor for computer security, and founded eSECURITY Technologies Rolf Oppliger ( http://www.esecurity.ch ) to provide scientific and state-of-the-art consulting, education, and engineering services related to information technology security. He has published numerous scientific papers, articles, and books, mainly on security- related topics. He is a member of the Association for Computing Machinery (ACM), the IEEE Computer Society, and the International Federation for Information Processing (IFIP) Technical Committee 11 (TC11) Working Group 4 (WG4) on network security.