Who should attend: Anyone responsible for running a Web site who wants to understand the tradeoffs in making it secure. Anyone seeking to understand how the Web is likely to be secured. Anyone responsible for systems where the browser is becoming the universal client.

The World WideWeb is perhaps the most important enabler (so far) of electronic commerce and the long-predicted information economy. Because it "just happened," its initial design gave little or no thought to industrial strength security. Numerous proposals and products have surfaced to secure the Web. This course will survey them with the goal of understanding the strengths and weaknesses of each.

Topics will include:

	Fast, tight review of network security
	How commomplace Web technology works out of the box
	Architectural alternatives for security    Network stack insertion points for security: IPsec, SHTTP/SMIME, SSL/STLP, SET/PGP, etc.    Application approaches from the blunt to the subtle: BasicAuth, cookies, client certificates
	Computational models and how they get serviced securely: JAVA/applets, helper apps, statefulness in a Web world, etc.
	Where the money is    Payment protocols: Cybercash, Digicash, Open Market, First Virtual, SET, etc.    Operational assurance: Configuration, firewalls, replication, proxies, logging, etc.    Continuing education: Where to pay attention, how to help yourself

 

Jon Rochlis  (M10, T8) is a senior consultant for SystemExperts which provides high level advice to businesses on network security, distributed systems design and management, high-availability, and electronic commerce. Before joining SystemExperts, Mr. Rochlis was engineering manager with BBN Planet, a major national Internet service provider.