Chuong 03 - An Toan TMDT

8/14/2019 Chuong 03 - An Toan TMDT

1/48

BB mnmn QuQunn trtr ttcc nghinghipp TMTTMT -- KhoaKhoa TMTTMTTrTrngng ii hhcc ThngThng mmii


2/48

LLchch ss 2020 nmnm phphtt tritrinn ccaa virusvirus

1010 vv ttnn cngcng nnii titingng ccaa tintin ttcc

TTnhnh hhnhnh anan ninhninh mmngng vv anan totonnTMTTMT ViVitt NamNam ggnn yy

AnAn totonn ll vvnn quanquan trtrngngccaa thngthng mmii iinn tt

ChuyChuynn vv ccccvv ttnn cngcnghh ththngngthngthngtintin vv thngthngmmiiiinn tt


3/48

TTnn ththtt dodo cccc vv ttnn cngcng gygy rarall rrtt llnn

400400 ttUSDUSD ll ttngng thithitt hhii dodo ttii phphmm trntrn

mmngng gygy rara nmnm 20042004((NguNgunn: McAfee Criminology Report 2005: McAfee Criminology Report 2005))

RingRing 2/2006,2/2006, thithitt hhii ccaa cccc vv ttnn cngcng

quaqua mmngng internet (TG)internet (TG) khokhongng 8080 ttUSDUSD ViVitt Nam, 1Nam, 1 tutunn thithitt hhii khokhongng 2,82,8 tritriuuUSDUSD tngtng ngng 4545 ttVNVN((NguNgunn: VNCERT 2006: VNCERT 2006))

AnAn totonn ll vvnn quanquan trtrngngccaa thngthng mmii iinn tt


4/48

CCcc tt chchcc linlin ttcc bb ttnn cngcng bbii nhnhngngkk cc kinhkinh nghinghimm tt bnbn trongtrong vv bnbn ngongoii

CCcc loloii ttnn cngcng ttii cccc tt chchcc rrtt aa ddngng

SS mmtt mmtt ttii chchnhnh tt cccc vv ttnn cngcng ccthth ll rrtt llnn

CC thth ss ddngng kktt hhpp nhinhiuu cngcng nghngh

chchngng llii cccc vv ttnn cngcng nnyy

((NghinNghin ccuuccaa Computer Security InstituteComputer Security Institute vv FBI)FBI)


5/48

TT phphaa

ngngii ss ddngng

WebsiteWebsite truytruy ccpp ll xxcc ththcc vv hhpp phphppCCcc trangtrang webweb vv cccc mmuu khaikhai thngthng tintin khngkhng chchaa

ngng cccc oonn mm nguynguy hihimm trongtrongThngThng tintin cc nhnnhn cc mm bboo bb mmtt

MMyy chch,, nnii dungdung vv cccc ddchch vv cungcung ccpp trntrn

websitewebsite khngkhng bb phph vvHoHott ngng kinhkinh doanhdoanh didinn rara uu nn,, khngkhng bb llmmgiginn oonn

TT phphaatt chchcc

ThngThng tintin traotrao ii gigiaa ngngii ss ddngng vv tt chchcc,,

khngkhng bb bnbn thth baba nghenghe trtrmmThngThng tintin traotrao ii gigiaa haihai bnbn khngkhng bb bibinn ii

TT haihai phphaa


6/48

TTnhnh totonn vvnnDD liliu/thngu/thng tintin khngkhng bb thaythay ii khikhi lulu trtr hohocc chuychuynn phphtt..KhngKhng phph nhnh

CCcc bnbn thamtham giagia giaogiao ddchch khngkhng phph nhnhnn cccc hhnhnh ngng trtrcc

tuytuynn mm hh ththcc hihinn

TTnhnh xxcc ththccKhKh nngnng nhnhnn bibitt cccc ii ttcc thamtham giagia giaogiao ddchch trtrcc tuytuynn

CCpp phphppXXcc nhnh quyquynn truytruy ccpp cccc ttii nguynnguyn ccaa tt chchcc


7/48

KiKimm sosottTTpp hhpp thngthng tintin vv ququ trtrnhnh truytruy ccpp ccaa ngngii ss ddngng

TTnhnh tintin ccyyNgoNgoii nhnhngng ngngii cc quyquynn,, khngkhng aiai cc thth xemxem cccc thngthng

iipp vv truytruy ccpp nhnhngng dd liliuu cc gigi trtrTTnhnh ringring tt

KhKh nngnng kikimm sosott vivicc ss ddngng cccc thngthng tintin cc nhnnhn ccaakhkhchch hhngng

TTnhnh chch lliiCCcc chchcc nngnng ccaa mmtt websitewebsite thngthng mmii iinn tt cc ththcchihinn ngng nhnh mongmong ii


8/48

Internet

WebWeb

serverserverChngChng trtrnhnh

CGI,CGI,LuLu trtr(CSDL)(CSDL)

TrTrnhnh duyduyttWebWeb

NguNgunn:: ScambrayScambray, J. et al: Hacking Exposed 2e. New York, J. et al: Hacking Exposed 2e. New York

XXcc ththcc

TTnhnh ringring ttToTonn vvnn

KhngKhng phph nhnh

XXcc ththccCCpp phphpp

KiKimm sosott

TTnhnh ringring tt

ToTonn vvnn


9/48

TTnn cngcng phiphi kk thuthutt

TTnn cngcng kk thuthuttSS ddngng mmnhnh khkhee llaa ggtt ngngii ss ddngng tititt ll thngthng tintin nhnhyyccmm hayhay ththcc hihinn cccc hhnhnh ngng nhnh hhngng nn vvnn anan totonn

TTnn cngcng cccc pp llcc xx hhii:: loloii ttnn cngcng khngkhng ss ddngng cngcng nghngh

mm ss ddngng cccc pp llcc xx hhii llaa ngngii ss ddngng ththcc hihinn ccccvivicc cc hhii nn mmngng mmyy ttnhnh hohocc ttnn hhii quyquynn llii cc nhnnhn

ChCh yyuu llii ddngng ss nhnh dd cc tin,tin, kkmm hihiuu bibitt hohocc gygysscc pp tmtm ll ii vvii ngngii ss ddngng


10/48

CCcc bibinn phphpp ii phph vvii

ttnn cngcng phiphi kk thuthutt

GiGioo ddcc,, oo ttoo,,nngnng caocao nhnhnn ththcc

HoHonn thithinn cccc ththttcc,, chchnhnh sschch

caocao ccnhnh gigicc,,kikimm tratra ssxmxm nhnhpp


11/48

SS ttnn cngcng ss ddngng phphnn mmmm vvcccc hh ththngng tritri ththcc hayhay kinhkinh nghinghimmchuynchuyn mnmn ttnn cngcng vvoo cccc hh ththngng

CCcc hhnhnh ththccttnn cngcng

CCnn ddngng cccc bibinn phphpp,, cccc cngcng cc phphnn ccngngvv phphnn mmmm ii phph


12/48

VirusVirusMMtt oonn mm phphnn mmmm tt xmxm nhnhpp vvoo mmtt mmyy chch,, baobaoggmm cc hh iiuu hhnhnh,, nhnnhn lnln;; nn yuyu ccuu cccc chngchng trtrnhnh

ccaa mmyy chch khikhi chchyy phphii kkchch hohott nnSuSu mmyy ttnhnh (worm)(worm)

MMtt chngchng trtrnhnh phphnn mmmm cc chchyy mmtt ccchch cc llpp, chi, chiphphii nhinhiuu ttii nguynnguyn ccaa mmyy chch chocho nn vv nn cc khkh nngnng

nhnnhn gigingng ttii cccc mmyy khkhcc

Macro virusMacro virus vv macro wormmacro wormMMtt loloii virus hayvirus hay susu mmyy ttnhnh cc ththcc thithi khikhi mmtt ii ttngngngng ddngng khikhi cc mm hayhay mmtt thth ttcc cc bibitt cc ththcc thithi

ConCon ngngaa ththnhnh TT roaroa (Trojan horse)(Trojan horse)MMtt chngchng trtrnhnh xuxutt hihinn vvii nhnhngng chchcc nngnng hhuu ddngngnhngnhng nn baobao ggmm cccc chchcc nngnng nn cc cccc nguynguy cc vv anan ninhninh


13/48

TinTin ttcc (hacker)(hacker) ll ngngii xmxm nhnhpp bbtt hhppphphpp vvoo mmtt website haywebsite hay hh ththngng cngcngnghngh thngthng tintin mm hh cc thth xxcc nhnh rr

HackerHackermm trtrngng

HackerHackermm enenHackerHackermm xanhxanh/samurai/samurai

HackerHackermm xxmm hayhay mm nunu


14/48

TTcc hhii do tindo tin ttcc gygy raraMMtt ninimm tintin ccaa khkhchch hhngng,, nhnh hhngng ttii danhdanh titingng,, ttii thuthunhnhpp,, llii nhunhunn ccaa doanhdoanh nghinghipp..

MMtt khkh nngnng chchpp nhnhnn mmtt kikiuu phngphng titinn thanhthanh totonn nnoo nhnh VISA,VISA, MastercardMastercard..

ThuThu nhnhpp vv llii nhunhunn gigimm tt cccc giaogiao ddchch gigi mmoo vv ththiigiangian chchtt ccaa nhnnhn vinvin..

ThThii giangian chchtt ccaa websitewebsite khikhi phphii ngng ccaa mmtt trongtrong ccccknhknh bbnn hhngng quanquan trtrngng sausau vv ttnn cngcng..

ChiChi phph ssaa chchaa cccc phphnn bb phph hohoii vv xyxy ddngng kkhohochch phngphng bbtt trtrcc chocho website,website, ngng ddngng web...web...

CCcc trtrnn chichinn phphpp ll vv nhinhiuu vvnn linlin quanquan tt vv ttnn cngcngvvii mmcc bboo mmtt llngng lloo,, cccc khokhonn titinn phphtt vv titinn bbiiththngng phphii trtr chocho nnnn nhnnhn..


15/48

This site was hacked againThis site was hacked again

ii didinn chocho ccngng ngng ITIT ViVitt NamNam chchngng titi xinxin tuyntuyn bb..ii vvii NguyNguynn HaHa BBnhnh:: NNuu mmtt ngngyy NguyNguynn HaHa BBnhnh chacha ngng rara xinxin llii thth ngngyy

chodientuchodientu ssngng khngkhng cc chchtt ccngng khngkhng xongxong..NNuu bboo chch vv cccc cc quanquan chchcc nngnng khngkhng vvoo cucucc,, thanhthanh tratra nhnhngng hohott ngng mm mm ccaa PSPS

ccngng nhnh NguyNguynn HaHa BBnhnh hackerhackerss vvoo cucucc..

WebsiteWebsite chodientu.comchodientu.com mmtt website TMTwebsite TMT hhpp phphpplinlin ttcc bb ttnn cngcng ccpp ttnn miminn vv ii giaogiao didinn (9/2006)(9/2006)

WebsiteWebsite BB GiGioo ddcc oo ttoo bb ttnn cngcng

VV llaa oo ccaa oo AnhAnh TuTunn titinn hhnhnh quaqua mmngng chichimm oott ggnn 2020tritriuu ngng ccaa cccc ththnhnh vinvin trntrn didinn nn trtrcc tuytuynn TTVNOL.TTVNOL.

ngng dydy llmm gigi thth ATM doATM do NguyNguynn AnhAnh TuTunn ccmm uu rrtt ccss titinn khokhongng 2,62,6 tt ngng

235 website235 website ccaa ViVitt Nam (.Nam (.vnvn)) bb hackerhackernncc ngongoii ttnn cngcng.. TrongTrong cc webweb ccaa BB ThngThng mmii -- mot.gov.vnmot.gov.vn,, BB TTii nguynnguyn MiMi trtrngng--ciren.gov.vnciren.gov.vn,, BB KhoaKhoa hhcc CngCng nghngh -- oss.gov.vnoss.gov.vn


16/48

Web site ca Ban Qun l d n DSM/EE- Cc iu tit in lc B Cng Thnghin vn ang b hackertn cng


17/48

LoLoii ttnn cngcng bbngng ccchch ggii mmtt ss llngng llnn truytruy vvnn thngthngtintin ttii mmyy chch khikhinn mmtt hh ththngng mmyy ttnhnh hohocc mmtt mmngng bb

ququ ttii,, ddnn ttii khngkhng thth cungcung ccpp ddchch vv hohocc phphii ddngnghohott ngng khngkhng thth ((hohocc khkh cc thth)) truytruy ccpp tt bnbn ngongoii

GGii yuyu ccuu http://www...http://www...


18/48

HH thngthng mmcc tiutiu

TinTin ttcc

ng lot tn cng

Gi ti liu v nhn cc thng bo

CC nhnnhn DoanhDoanh nghinghipp CQCQ nhnh nncc TrTrngng hhcc ViVinn nghinnghin ccuu NhNh cungcung ccpp DVDV


19/48

KK trtrmm trntrn mmngng

Mt dng ca chng trnh nghe trm, gimst s di chuyn ca thng tin trn mng

TTnn cngcng tt bnbn trongtrong doanhdoanh nghinghippNhng mi e do bt ngun t chnh nhngthnh vin lm vic trong doanh nghip


20/48

AnAn totonn trongtrong

truytruynn thngthng TMTTMT

pp ddngng cccc bibinn phphppmm bboo anan totonn trongtrong

truytruynn thngthng TMTTMT

CCcc cngcng nghnghmm bboo anan totonn mmngng

pp ddngng cccc bibinn phphppmm bboo anan totonn mmngngvv cccc hh ththngng TMTTMT

QuQunn trtr anan totonnthngthng mmii iinn tt

NhNhnn ththcc vvnn

XyXy ddngng kk hohochch

ThThcc thithi kk hohochch


21/48

MMtt ququ trtrnhnh xx ll cc hh ththngng xxcc nhnh cccc loloiirrii roro anan ninhninh cc thth xxyy rara vv xxcc nhnh cccc hohott ngng

ccnn thithitt bboo vv hayhay gigimm bbtt cccc ttnn cngcng nnyy

nhnh gigi LnLn kk hohochch ThThcc hihinnTheoTheo didi//KKtt lulunn

nhnh gigi cccc rrii rorobbngng cccc xxcc nhnh

cccc ttii ssnn,, cccc iimm dd bbttnn thngthng ccaa hh ththngngvv nhnhngng ee ddaa ii vvii

cccc iimm nnyy

XXcc nhnh cccc ee ddaannoo cc thth xxyy rara,, eeddaa nnoo ll khngkhng

XXcc nhnh mmcc ccaacccc bibinn phphpp ii phphchocho phph hhpp

CCcc cngcng nghngh ccchchnn ii phph vvii ccccee dodo cc uu tintin

caocao uu tintin llaa chchnn cccc

loloii cngcng nghngh cc uutintin caocao

LoLoii nnoo mm bbo/khngo/khngmm bboo vv ccnn thaythay ii

CCcc mmii ee dodo mmii

TrTrnhnh cngcng nghngh hihinnttii

BB sungsung thmthm danhdanh mmcccccc hh ththngng ccnn bboo vv

4 pha ca qu trnh qun tr an ton TMT


22/48

iiuu khikhinn vv kikimm sosott truytruy ccppCCcc hh ththngng xxcc ththcc

CCcc kk thuthutt mm hohoMM hohoChCh kk iinn ttChChngng ththcc iinn tt

CCcc giaogiao ththcc anan totonnSSL, SET, TLSSSL, SET, TLSBBoo vv hh ththngng mmngng ccaa tt chchcc

BBcc ttngng llaa

CCcc bibinn phphpp bboo vv hh ththngng khkhch/chch/chCCcc chngchng trtrnhnh ttmm && phphtt hihinn xmxm nhnhppAnti virusAnti virus


23/48

CC chch xxcc ththccGiGiii hhnn cccc hohott ngng ththcc hihinn bbii vivicc nhnhnn ddngng mmtt ngngii

hayhay mmtt nhnhmmThiThitt bb (Passive tokens)(Passive tokens)

CCcc thithitt bb lulu trtr nhnh ddii tt (magnetic strips)(magnetic strips) cc ss ddngng trongtrong hhththngng nhnhnn ddngng baobao ggmm mm mmtt vv cccc cc iimm nhnhnn ddngng khkhcc

((sinhsinh trtrcc))

CCcc yyuu tt iiuu kikinn nhnhnn ddngngMMtt khkhuu

CCcc hh ththngng sinhsinh trtrcc hhcc

HH ththngng nhnhnn ddngng cccc bnbn thamtham giagia ll hhpp phphpp ththcchihinn giaogiao ddchch,, xxcc nhnh cccc hhnhnh ngng ccaa hh ll cc phphpp

ththcc hihinn vv hhnn chch nhnhngng hohott ngng ccaa hh,, chchchocho

nhnhngng giaogiao ddchch ccnn thithitt cc khkhii ttoo vv hohonn ththnhnh

iiuu khikhinn && kikimmsosott truytruy ccpp


24/48

SS khngkhng linlin ttcc

ccaa dduu vnvn taytay mmttngngii,, cc chuychuynn

ii ththnhnh ddngng ssvv lulu trtr nhnh ccccmmuu ddngng nhnhnn

ddngng xxcc ththcc

HH ththngng nhnhnn ddngng xxcc nhnhnn mmtt ngngii bbngng ccchchnhnh gigi ,so,so ssnhnh cccc cc ttnhnh sinhsinh hhcc nhnh dduu vnvn taytay,,

mmchch mmuu mmtt,, cc iimm mmtt,, gigingng nnii hohocc hhnhnh vivi

PhnPhn ttchch cccc iimm

khkhcc duyduy nhnhtt trongtrongtrngtrng mmtt ((mmtt phphnn

mmuu ccaa mmtt),),chuychuynn ii ththnhnhddngng ss vv lulu trtr

nhnh cccc mmuu nhnhnn ddngng xxcc ththcc

PhnPhn ttchch cccc cc

ttnhnh mm hhcc trongtronggigingng nnii,, chuychuynn

ii ththnhnh ss vv lulutrtr nhnh cccc mmuu

ddngng nhnhnn ddngng

xxcc ththcc

NhNhnn ddngnggigingng nnii

NhNhnn ddngngmmchch mmuu mmtt

TheoTheo didi nhnh bbnn phphmm:: phnphn ttchch pp llcc,, ttcc vv nhnhpp iiuu ccaacccc tt cc nhnh,, chuychuynn ththnhnh ddngng ss vv lulu trtr nhnh cccc mmuuddngng nhnhnn ddngng xxcc ththcc ((ccchch nnyy chacha ththcc ss phphtt tritrinn))

NhNhnn ddngngvnvn taytay


25/48

CCcc khkhii ninimmBBnn ggcc hayhay bbnn rr (Plaintext)(Plaintext)

MMtt mmuu tin/tin/vnvn bbnn khngkhng mm hhaa vv concon ngngii cc thth cc

BBnn mm hoho hayhay bbnn mm ((CiphertextCiphertext))MMtt bbnn ggcc sausau khikhi mm hhaa chchmmyy ttnhnh mmii cc thth cc

KhKhaa (Key)(Key)oonn mm bb mmtt ddngng mm hhaa vv gigiii mm mmtt vnvn bbn/mn/muu tintin

ThuThutt totonn mm hhaa (Encryption algorithm)(Encryption algorithm)LL mmtt bibiuu ththcc totonn hhcc ddngng mm hhaa bbnn rr ththnhnh bbnn mm,, vv

ngngcc llii

MM hoho ll ququ trtrnhnh xxoo trtrnn ((mm hhaa)) mmtt tintin nhnhnn,, vnvnbbnn hayhay cccc ttii liliuu ththnhnh vnvn bbnn,, ttii liliuu ddii ddngngmmtt mm bbtt cc aiai,, ngongoii ngngii ggii vv ngngii nhnhnn,,

uu khngkhng thth hohocc khkh cc thth cc


26/48

MMcc chch ccaa kk thuthutt mm hohomm bboo anan totonn chocho cccc thngthng tintin cc lulu gigi,, vv mm bboo anan totonn

chocho thngthng tintin khikhi truytruynn phphtt trntrn mmngng..

KK thuthutt mm hoho gigipp mm bbooTTnhnh totonn vvnn ccaa thngthng iipp;;

ChCh

ngng

phph

nhnh

;;

TTnhnh xxcc ththcc;;

TTnhnh bb mmtt ccaa thngthng tin.tin.

CCcc kk thuthutt mm hoho cc bbnnMM hoho bbngng thuthutt totonn bmbm ((hhmm Hash)Hash)MM hoho khokho bb mmtt

MM hoho khokho cngcng khaikhai


27/48

KK thuthutt mm hoho bbngng thuthutt totonn bmbm ss ddngngthuthutt totonn HASHHASH mm hoho thngthng iipp

HHmm hash (hash (hhmm bmbm)) ll hhmm mmtt chichiuu mmnnuu aa mmtt llngng dd liliuu bbtt kk quaqua hhmm

nnyy ss chocho rara mmtt chuchuii cc ddii cc nhnh(160 bit)(160 bit) uu raraVV dd,, tt ""IlluminatusIlluminatus"" ii quaqua hhmm SHASHA--11 chocho kktt ququE783A3AE2ACDD7DBA5E1FA0269CBC58D.E783A3AE2ACDD7DBA5E1FA0269CBC58D.

TaTa chchccnn ii ""IlluminatusIlluminatus"" ththnhnh "Illuminati" ("Illuminati" (chuychuynn "us""us" ththnhnh"i")"i") kktt ququ ss trtr nnnn hohonn totonn khkhcc ((nhngnhng vvnn cc ddii ccnhnh ll 160 bit) A766F44DDEA5CACC3323CE3E7D73AE82.160 bit) A766F44DDEA5CACC3323CE3E7D73AE82.


28/48

TTnhnh chchtt cc bbnn ccaa hhmm HASHHASHTTnhnh mmtt chichiuu:: khngkhng thth suysuy rara dd liliuu banban uu tt kktt ququ**

TTnhnh duyduy nhnhtt:: xxcc susutt cc mmtt vv vava chchmm (hash collision),(hash collision),ttcc ll haihai thngthng iipp khkhcc nhaunhau cc ccngng mmtt kktt ququ hash,hash, ll cccckk nhnh..

ngng ddngng ccaa hhmm hashhashChChngng vv phphtt hihinn xmxm nhnhpp:: chngchng trtrnhnh chchngng xmxm nhnhppsoso ssnhnh gigi trtr hashhash ccaa mmtt filefile vvii gigi trtr trtrcc kikimm tratraxemxem filefile cc bb aiai thaythay ii hayhay khngkhng

BBoo vv ttnhnh totonn vvnn ccaa thngthng iipp cc ggii quaqua mmngng bbngng

ccchch kikimm tratra gigi trtr hashhash ccaa thngthng iipp trtrcc vv sausau khikhi ggiinhnhmm phphtt hihinn nhnhngng thaythay ii chocho dd ll nhnh nhnhtt

TToo chchaa khkhaa tt mmtt khkhuu

TToo chch kk iinn tt..


29/48

MM hoho khokho bb mmtt

GGii ll mm hoho ii xxngng hayhay mm hoho khokho ringring

SS ddngng mmtt khokho chocho cc ququ trtrnhnh mm hoho ((ththcc hihinn bbiingngii ggii)) vv ququ trtrnhnh gigiii mm ((ththcc hihinn bbii ngngii nhnhnn))

MM hoho khokho cngcng ccngng

GGii ll mm hoho khngkhng ii xxngng hayhay mm hoho khokho chungchung

SS ddngng haihai khokho trongtrong ququ trtrnhnh mm hoho:: mmtt khokho ddngng mm hoho thngthng iipp vv mmtt khokho khkhcc ddngng gigiii mm..


30/48

MM hoho khokho bb mmtt

MM hoho khokho cngcng ccngng


31/48

SS khokho MMtt khokho nn MMtt ccpp khokho

LoLoii khokho KhoKho bb mmtt MMtt khokho bb mmtt vvmmtt khokho cngcng khaikhai

QuQunn ll khokho nn giginn nhngnhngkhkh ququnn llYuYu ccuu cccc chchngngththcc iinn tt vv bnbntintin ccyy thth baba

TTcc giaogiao ddchch NhanhNhanh ChChmm

ngng ddngngMM hoho hhngng lolottCCcc ii ttcc ththngnggiaogiao ddchch

MM hoho nn llKhKhii llngng nhnhChCh kk iinn tt


32/48

ChCh kk iinn tt cc ttoo llpp ddii ddngng tt,, chch,, ss,, kk hihiuu,, mm thanhthanhhohocc cccc hhnhnh ththcc khkhcc bbngng phngphng titinn iinn tt,, ggnn lilinn hohocc kktt hhppmmtt ccchch ll ggcc vvii thngthng iipp dd liliuu,, cc khkh nngnng xxcc nhnhnn ngngii kk

thngthng iipp dd liliuu vv xxcc nhnhnn ss chchpp thuthunn ccaa ngngii ii vvii nniidungdung thngthng iipp dd liliuu cc kk..

((LuLuttGiaoGiao ddchch iinn tt))

ChChcc nngnng ccaa chch kk iinn ttLL iiuu kikinn ccnn vv quyquy nhnh ttnhnh duyduy nhnhtt ccaa vnvn bbnniinn tt cc thth;;

XXcc nhnh rr ngngii chchuu trtrchch nhinhimm trongtrong vivicc ttoo rara vnvn bbnn ;;

ThTh hihinn ss ttnn ththnhnh ii vvii nnii dungdung vnvn bbnn vv trtrchch nhinhimmccaa ngngii kk

BBtt kk thaythay ii nnoo ((vv nnii dung,dung, hhnhnh ththcc...)...) ccaa vnvn bbnn trongtrongququ trtrnhnh lulu chuychuynn uu llmm thaythay ii tngtng quanquan gigiaa phphnn bbthaythay ii vvii chch kk


33/48

ChChkkiinn tt(2)

Ngi gi ngdng hm bm

(3)Ngi gi m ha s dng

kha ring ca mnh

(8)Ngi gi ng dng

hm bm

Thng ip rt gn Ch k s

Phong b s

Phong b s

Ch k s

Thng ip rt gnThng ip rt gn mi

(9)

So snh

(4)Ngi gi m ha s dng kha cng

cng ca ngi nhn

(5)Gi th in t cho ngi nhn

(6)

Ngi nhn gii m s dngkha ring ca ngi nhn

(7)Ngi nhn gii m s dngkha chung ca ngi gi

Thng ip gc

Thng ip gc

v ch k s

Thng ip gc

(1) (3)


34/48

1.1. TToo mmtt thngthng iipp ggcc ggii ii

2.2. SS ddngng hhmm bmbm ((thuthutt totonn mmyy ttnhnh)) chuychuynn tt thngthng iipp

ggcc ththnhnh thngthng iipp rrtt ggnn..3.3. NgNgii ggii ss ddngng khkhaa ringring mm hhaa thngthng iipp ss.. ThngThng

iipp rrtt ggnn sausau khikhi cc mm hhaa ggii ll chch kk ss hayhay chch kkiinn tt.. KhngKhng mmtt aiai ngongoii ngngii ggii cc thth ttoo rara chch kk iinntt vv nn cc ttoo rara trntrn cc ss khkhaa ringring

4.4. NgNgii ggii mm hhaa cc thngthng iipp ggcc vv chch kk ss ss ddngng khkhaacngcng ccngng ccaa ngngii nhnhnn.. ThngThng cc sausau khikhi cc mm hhaaggii ll phongphong bb ss hhaa

5.5. NgNgii ggii ggii phongphong bb ss hhaa chocho ngngii nhnhnn


35/48

6.6. KhiKhi nhnhnn cc phongphong bb ss hhaa ngngii nhnhnn ss ddngng khkhaa ringringccaa mmnhnh gigiii mm nnii dungdung ccaa phongphong bb ss hhaa vv nhnhnncc mmtt bbnn saosao ccaa thngthng iipp ggcc vv chch kk ss ccaa ngngiiggii

7.7. NgNgii nhnhnn ss ddngng khkhaa chungchung ccaa ngngii ggii gigiii mm chchkk ss vv nhnhnn cc mmtt bbnn saosao ccaa thngthng iipp rrtt ggnn ggcc (do(dongngii ggii ttoo rara,, ss cc ss ddngng ii chchngng))

8.8. NgNgii nhnhnn ss ddngng hhmm bmbm chuychuynn thngthng iipp ggcc ththnhnhthngthng iipp rrtt ggnn nhnh bbcc 22 ngngii ggii llmm vv ttoo rarathngthng iipp rrtt ggnn mmii

9.9. NgNgii nhnhnn soso ssnhnh thngthng iipp rrtt ggnn mmii vv bbnn copycopy ccaa

thngthng iipp rrtt ggnn ggcc nhnhnn cc bbcc 7;7; NNuu haihai thngthng iipprrtt ggnn trtrngng nhaunhau,, cc thth kktt lulunn chch kk iinn tt ll xxcc ththcc vvnnii dungdung thngthng iipp ggcc khngkhng bb thaythay ii sausau khikhi kk


36/48

NNii dungdung ccaa chchngng ththcc iinn ttThngThng tintin vv tt chchcc cungcung ccpp ddchch vv chchngng ththcc chch kk iinn tt..

ThngThng tintin vv cc quanquan,, tt chchcc,, cc nhnnhn cc ccpp chchngng ththcc iinn tt..SS hihiuu ccaa chchngng ththcc iinn tt..

ThThii hhnn cc hihiuu llcc ccaa chchngng ththcc iinn tt..

DD liliuu kikimm tratra chch kk iinn tt ccaa ngngii cc ccpp chchngng ththcc iinn tt..

ChCh

kk

ii

nn

tt

cc

aa

tt

chch

cc

cungcung

cc

pp

dd

chch

vv

chch

ngng

thth

cc

chch

kk

ii

nn

tt

.

.

CCcc hhnn chch vv mmcc chch,, phphmm vivi ss ddngng ccaa chchngng thth iinn tt..

CCcc hhnn chch vv trtrchch nhinhimm phphpp ll ccaa tt chchcc cungcung ccpp ddchch vv chchngngththcc chch kk iinn tt..

CCcc nnii dungdung khkhcc theotheo quyquy nhnh ccaa ChChnhnh phph..

MMtt loloii chchngng nhnhnn dodo cc quanquan chchngng nhnhnn((Certification AuthorityCertification Authority-- CACA) (hay) (hay bnbn tintin ccyy thth baba)) ccpp;;ll cncn cc xxcc ththcc cccc bnbn thamtham giagia giaogiao ddchch;; ll cc ss

mm bboo tintin ccyy ii vvii cccc giaogiao ddchch thngthng mmii iinn tt


37/48

GiaoGiao ththcc


38/48

TTngng quanquanGiaoGiao ththcc bboo mmtt kktt nnii gigiaa clientclient vv serverserver

CungCung ccpp 11 ngnghhmm vvngng chchcc dd liliuu ii qua.qua.TrTr ththnhnh mmtt chuchunn anan totonn truytruy ccpp dd liliuu cc hh trtr bbiihhuu hhtt cccc browser.browser.

MM hhnhnhLL 11 giaogiao ththcc vvnn chuychuynn cc bibitt thmthm vvoo gigiaa ttngng ngng ddngng vvttngng giaogiao vvnn

BBoo mm ttnhnh ringring tt vv totonn vvnn ccaa tttt cc dd liliuu cc truytruynn gigiaa 22hohocc nhinhiuu hnhn cccc mmyy ttnhnh khikhi nn trongtrong mmngng

SS ddngng khkhaa ringring vv khkhaa cngcng khaikhai mm hhaa vv chchngng ththcc dd liliuu

GiaoGiao ththccanan totonn

LLpp khekhe ccmmanan totonn (SSL)(SSL)

GiaoGiao ththcc


39/48

uu iimm

nn giginn,, thuthunn titinn,, khngkhng yuyu ccuu thaythay ii trongtrong phphnn mmmm phphaa ngngiimuamua vv ngngii bbnn..

NgNgii bbnn cc xxcc ththcc ii vvii ngngii muamua..

ThngThng tintin cc mm bboo ttnhnh ringring tt,, totonn vvnn..

NhNhcc iimmKhngKhng mm bboo ngngii muamua cc xxcc ththcc vvii ngngii bbnn,, nguynguy cc ngngiimuamua phph nhnhnn giaogiao ddchch..

ThngThng tintin ttii khokhonn ccaa ngngii muamua phphii cc ggii ttii ngngii bbnn,, nguynguy ccll ttii khokhonn


uu,, nhnhcc iimm ccaa GiaoGiao ththcc SSLSSL

GiaoGiao ththcc


40/48

TTngng quanquanSETSET -- giaogiao ththcc cc thithitt kktt cungcung ccpp anan ninhninh giaogiao ddchch thth ttnnddngng trtrcc tuytuynn chocho cc khkhchch hhngng vv doanhdoanh nghinghipp

MMtt ttpp cccc giaogiao ththcc vv nhnh ddngng bboo mmtt chocho phphpp ngngiiddngng ss ddngng nnnn ttngng thanhthanh totonn bbngng thth ttnn ddngng trntrn mmttmmngng mm nhnh InternetInternet


SS ththcc thithi giaogiao ththcc SETSET

Bn my tnh ngi gi


41/48

Bn my tnh ngi giSenders

Private

Signature Key

Senders

Certificate

+

+

Message

+

Digital Signature

Receivers

Certificate

Encrypt

Symmetric

Key

EncryptedEncrypted

MessageMessage

Receivers

Key-Exchange Key

Encrypt

DigitalDigital

EnvelopeEnvelope

Message

Message DigestMessage Digest

Prentice Hall, 2000

Bn my tnh ngi nhn


42/48

Bn my tnh ngi nhn

DecryptSymmetric

Key

EncryptedEncrypted

MessageMessage

Senders

Certificate

+

+

Message

compare

DigitalDigital

EnvelopeEnvelope

Receivers Private

Key-Exchange Key

Decrypt

Message DigestMessage DigestDigital SignatureSenders Public

Signature Key

Decrypt

Message DigestMessage Digest

Prentice Hall, 2000

GiaoGiao ththcc


43/48

uu iimmGiGiii phphpp bboo mmtt totonn didinnNgNgii muamua,, ngngii bbnn cc xxcc ththcc vvii nhaunhau qua certificate doqua certificate doCACA ccpp..

PhnPhn phphtt khkhaa public anpublic an totonn qua CAqua CA llmm cc ss chocho xxcc ththccqua DS.qua DS.

NgNgii bbnn khngkhng bibitt thngthng tintin cc nhnnhn,, ttii khokhonn ccaa ngngiimuamua..

ChCh kk kkpp gigipp loloii bb nhnhngng giangian llnn tt phphaa ngngii bbnn..

anan totonn

uu,, nhnhcc iimm ccaa GiaoGiao ththcc SETSET

GiaoGiao ththcc


44/48

NhNhcc iimmYuYu ccuu thaythay ii llnn trongtrong nnnn ttngng thanhthanh totonn hihinn ttii..

YuYu ccuu thaythay ii trongtrong phphnn mmmm,, phphnn ccngng tt titinn.. YuYu ccuu nnyy cc

thth chchpp nhnhnn cc ii vvii cccc cngcng tyty,, ngnngn hhngng phphtt hhnhnh thth ttnnddngng, song, song khkh chchpp nhnhnn ii vvii khkhchch hhngng ccngng nhnh cccc ccaa hhngng..

YuYu ccuu mmtt hh ttngng PKIPKI ddaa trntrn ss cc mmtt ccaa CA.CA. CCcc tt chchcc ttiichchnhnh phphii trtr thmthm chichi phph ccii tt vv duyduy trtr PKIPKI phphii cc trtr chocho CA.CA.

CCcc gigiii thuthutt trntrn PKIPKI ll phphcc ttpp,, ttnn kkmm,, ttcc chchmm ((ngnngn hhngng yuyuccuu 750750 giaogiao ddch/giych/giy trongtrong khikhi SETSET mmii chchtt 11 giaogiao ddch/giych/giy.. TTcc cc thth cc ccii thithinn vvii vivicc ss ddngng phphnn ccngng -->>gigi ththnhnh tngtng caocao.).)

ChCh ccpp ttii cccc giaogiao ddchch ddaa trntrn thanhthanh ttanan thth ((ttnn ddngng hohocc nn).).

CCcc giaogiao ddchch ddaa trntrn ttii khkhanan vdvd:: sscc iinn tt (e(e--check)check) khngkhng cc hhtrtr trongtrong SETSET

LL mmtt giaogiao ththcc bboo mmtt rrtt totonn didinn nhnhngng ccngng rrtt phphcc ttpp, SET, SET ccnncc nn giginn hhaa cc chchpp nhnhnn bbii mmii tt chchcc linlin quanquan

anan totonn

BBoo vv hh ththngng


45/48

cc iimm ccaa bbcc ttngng llaaTTtt cc giaogiao thngthng tt bnbn trongtrong mmngng mmyy ttnhnh ccaa tt chchcc vv ngngcc lliiuu phphii ii quaqua ;;

ChChcccc giaogiao thngthng cc phphpp,, theotheo quiqui nhnh vv anan totonn mmngng mmyy ttnhnh

ccaa tt chchcc,, mmii cc phphpp ii qua;qua;KhngKhng cc phphpp thmthm nhnhpp vvoo chchnhnh hh ththngng nnyy..

MMtt phphnn mmmm hohocc phphnn ccngng ttchch bibitt mmtt mmngng ringring vvii mmngngcngcng ccngng chocho phphpp nhnhngng ngngii ss ddngng mmngng mmyy ttnhnh ccaa mmtt tt

chchcc cc thth truytruy ccpp ttii nguynnguyn ccaa cccc mmngng khkhcc ((vv dd,, mmngngInternet),Internet), nhngnhng ngng ththii ngnngn ccmm nhnhngng ngngii ss ddngng khkhcc,, khngkhngcc phphpp,, tt bnbn ngongoii truytruy ccpp vvoo mmngng mmyy ttnhnh ccaa tt chchcc

BBoo vv hh ththngngmmngng ccaa tt chchcc

BBoo vv hh ththngng


46/48

BBcc ttngng llaa

(Firewall)(Firewall)

BBoo vv hh ththngngmmngng ccaa tt chchcc


47/48

CCcc kikimm sosott ccaa hh iiuu hhnhnhKiKimm sosott truytruy ccpp thngthng quaqua vivicc tt ngng tt chchii khikhi ngngii ss

ddngng truytruy ccpp vvoo cccc khukhu vvcc khkhcc ((khngkhng cc phphpp)) ccaa mmngngmmyy ttnhnh

KiKimm sosott vivicc truytruy ccpp ttii cccc ttpp dd liliuu ccaa hh ththngng,, gigipp chochovivicc mm bboo anan totonn chocho cc ss dd liliuu vv chocho totonn bb hh ththngng..

PhPhnn mmmm chchngng virusvirus vv phphtt hihinn xmxm nhnhppPhPhnn mmmm chchngng virus:virus: BiBinn phphpp nn giginn nhnhtt vv tt ttnn kkmmnhnhtt chchngng llii cccc mmii ee dodo ttnhnh totonn vvnn ccaa cccc hh ththngng

HH ththngng phphtt hihinn xmxm nhnhpp:: khkh nngnng dd ttmm vv nhnhnn bibitt cccc

cngcng cc mm nhnhngng kk tintin ttcc ththngng ss ddngng hohocc phphtt hihinnnhnhngng hhnhnh ngng khkh nghinghi


48/48

2007 Trn Hoi Nam [email protected]

Q & AQ & A

Documents

Chuong 03 - An Toan TMDT