TRANSPORT AND APPLICATION SECURITY DESIGN AND USE

This chapter considers security mechanisms/tools within protocols and application frameworks. The fundamentals of the available security protocols deployable within the transport layer are transport layer security protocol (TLSv1.2) used over transmission control protocol (TCP), secure sockets Layer protocol (SSLv3) used over TCP, secure shell protocol (SSH) used over TCP, and datagram transport layer security protocol (DTLSvl) used over user datagram protocol (UDP). Service application protocols are used to provide communication between application client programs, frequently called user agents (UAs), and application servers. These protocols include the following: electronic mail (email), World Wide Web (web) and Identity Management (IdM), voice over internet protocol (VoIP), and instant messaging (IM). The protocols also include peer-to-peer networks and applications, Java for distributed applications, .NET for distributed applications, CORBA for distributed applications and DCE for distributed applications.