3. Secure Communications

Syllabus Points Covered

Secure software architecture

Developing secure code

• Apply security features incorporated into software including data protection, security, privacy and regulatory compliance

  • encryption

• Use and explain the contribution of cryptography and sandboxing to the ‘security by design’ approach in the development of software solutions

  • cryptography

Programming for the web

Data transmission using the web

• Investigate and describe the function of web protocols and their ports

  • SSL, TLS

• Explain the processes for securing the web

  • Secure Sockets Layer (SSL) certificates

  • digital signatures

Chapter Contents

• 3.1. Authenticity
  • 3.1.1. Glossary
• 3.2. Digital Signatures
  • 3.2.1. Signing
  • 3.2.2. Verifying
  • 3.2.3. Why Sign the Hash?
  • 3.2.4. Recommended Video
  • 3.2.5. Glossary
• 3.3. Digital Certificates
  • 3.3.1. Contents of a Digital Certificate
  • 3.3.2. Signing a Digital Certificate
  • 3.3.3. Verifying a Digital Certificate
  • 3.3.4. Glossary
• 3.4. Certificate Authorities
  • 3.4.1. Certificate Authority Hierarchy
  • 3.4.2. Glossary
• 3.5. Secure Communication and TLS
  • 3.5.1. Transport Layer Security (TLS)
  • 3.5.2. TLS Handshake
  • 3.5.3. TLS Session
  • 3.5.4. Glossary
  • 3.5.5. Recommended Video
• 3.6. Extension: Secure Random Number Generation
  • 3.6.1. PRNGs: Pseudorandom Number Generators
  • 3.6.2. Cryptographic Random Number Generators (CSPRNGs)
  • 3.6.3. Recommended Video
  • 3.6.4. Glossary