SSL应用安全解决方案

《SSL应用安全解决方案》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、SSL无处不在-F5为您的安全保驾护航面向应用的安全Chrome&Firefox不安全警告https://www.trustasia.com/tools/ats-checker.htmhttp2中国部分SSL全加密的站点201525%201770%SSL加密流量占比趋势201750%F5全站SSLHOWApacheIISTomcat维护窗口WeekendsOthers…MoreAfterHoursByApproval测试时间1Day1Day1DayMoreWeeksSSL证书PerServerMorePerServerPerServerTooMa

2、ny应用服务器浏览器Nightmare部署时间1Day1DayMoreWeeks1Day服务器实现SSLApacheIISTomcat维护窗口Others…测试时间部署时间SSL证书应用服务器浏览器1DayHoursAnytime1SANDayHoursEasyOne部署SSL网关设备SSLOffload性能瓶颈扩展性差功能单一自身的安全性ApacheIISTomcat维护窗口Others…测试时间部署时间SSL证书应用服务器浏览器BIG-IPLTMApplicationProxy+HTTP2.0Gateway+SSLServices1DayHo

3、ursAnytime1SANDayHoursEasyOneF5SSL安全网关业界SSL性能最高的平台易扩展的N+M技术丰富的协议网关功能SNI-多域名单一IP证书快速提升安全等级快速响应业界合规标准F5SSL安全网关－业界最高的SSL处理性能KeyLength64BitCommodityHardware5000Series7200vSSL10200VSSL12250V2048273TPS21,000TPS60,000TPS75,000TPS240,000TPSF5SSL安全网关–快速提升SSL等级https://www.ssllabs.com/d

4、ownloads/SSL_Server_Rating_Guide.pdfF5SSL安全网关－快速响应业界合规标准BIGIP默认支持全部ATS要求算法组合，无需更换设备,配置简单，快速ATS合规，不影响现有业务https://www.trustasia.com/tools/ats-checker.htmSSL并不完美February2010September2011February2013March2013March2013…April2014RC4AttacksWeaknessinCBCciphermakingplaintextguessingpos

5、sibleBEAST&CRIMEClient-sideorMITBattacksleveragingachosen-plaintextflawinTLS1.0andTLScompressionflawsRFC5746TLSextensionforsecurerenegotiationquicklymainstreamedLucky13AnothertimingattackAugust2009August2009InsecurerenegotiationvulnerabilityexposesallSSLstackstoDoSattackTIMEAre

6、finementandvariationofCRIMEHeartbleedTheendoftheInternetasweknowit!POODLEPaddingoracleattackonSSLv3DirePOODLEPaddingoracleattackonTLSFREAKImplementationattackonexportciphersLogJamImplementationattackonweakDHF5SSL安全网关–应对零日威胁OffloadandTransformationSSLEverywhereUseCaseDeploymentI

7、nboundOutboundSSLIntercept“BreakandInspect”ReverseSplitProxySSLProxyDataProtectionVisibilityandControlKeyManagementPartnersArchitectureInspectionZoneCustomerScenariosThalesSafenetHSMVenafiEKCMSymantecFireEyeAPTWebsenseSWGCiscoNG-IPSSymantecCertsForwardSSLAirGap2boxL2Bridged1bo

8、xVirtualAirGap1box全面、优化、可靠、领先的SSL解决方案