通俗易懂地解释网络安全和加密
尽管我可能会假装自己了解网络或安全方面的知识，这可能会帮助我通过面试或修复错误，但我并不真的觉得我在愚弄任何人。 我正在寻找对当前网络安全概念和解决方案的外行解释。这些信息很分散，我没有找到适合像我这样的“傻瓜”的资源（例如，经验丰富的 Java 开发人员可以讲行话，但不知道其含义）。
作为一名 Java 开发人员，我对此有一个薄弱的概念，并且希望更好地理解以下主题：
- PGP
- 公钥/私钥
- RSA/DES
- SSL 和 2 路 SSL（密钥库/信任库）
- 防止中间人欺诈
- 数字签名和证书
有资源吗那里真正以不需要 Cisco 证书/Linux 术语/知道什么是子网掩码或其他管道技能的方式解释它？
Although I might pretend very well that I know a thing about networks or security and it might help me pass an interview or fix a bug, I don't really feel I'm fooling anyone.
I'm looking for laymen explanation of current network security concepts and solutions. The information is scattered around and I didn't find a resource for "dummies" like me (e.g experienced Java developers that can speak the jargon but have no real clue what it means).
Topics I have a weak notion about and want to understand better as a Java developer:
- PGP
- Public / Private keys
- RSA / DES
- SSL and 2 way SSL (keystore / trustore)
- Protecting against Man in the middle fraud
- Digital Signature and Certificates
Is there a resource out there that really explains it in a way that doesn't require a Cisco certificate / Linux lingo / know what is subnet masking or other plumbing skills?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
Ferguson、Schneier 和 Kohno 所著的密码学工程一书可能会帮助您这是理解您列出的主题的一个不错的方法。我读了这本书的第一版（实用密码学），发现它相当不错。例如，我认为公钥/私钥密码学的描述相当容易理解。
它可能没有明确描述您所询问的所有情况下的具体术语。例如，我刚刚查看了我的《实用密码学》副本的索引，没有看到术语“密钥库”和“信任库”，但我点击的第一个谷歌搜索提供了定义我理解的语言（主要是因为我读了这本书）。
我还拥有 Aidan Cully 提到的《应用密码学》，我认为这也是一本非常好的书，当然值得拥有。然而，我更倾向于将其视为一本参考书（尽管有些过时 - 版权为 1996 年）。不过，就实际建议而言，我认为新书《实用密码学》的原始标题是正确的。这本书看起来很实用。
The book Cryptography Engineering by Ferguson, Schneier, and Kohno might be something that would get you a decent way down the road to understanding the topics you listed. I read the first version of this book (Practical Cryptography) and found it to be quite good. For example, I thought the descriptions of public key/private key cryptography to be reasonably straightforward to understand.
It might not explicitly describe the specific terms in all cases that you are asking about. For example, I just looked in the index of my copy of Practical Cryptography and do not see the terms "keystore" and "truststore", but the first google hit I clicked on for those provided a definition in language I understood (largely because I read the book).
I also own Applied Cryptography mentioned by Aidan Cully, and I think it is also a very good book and certainly worth owning. However I tend to think of it more as a reference book (although somewhat dated - the copyright is 1996). In terms of real-word advice, though, I think the original title of the newer book Practical Cryptography was right on. The book seems, well, practical.
Schneier 的应用密码学是我学习大部分知识的方式。我还没读过，但预计 Ross Anderson 的 安全工程 也会是一个很好的资源。
Schneier's Applied Cryptography is how I learned most of what I know. I haven't read it, but expect Ross Anderson's Security Engineering would also be a good resource.
实用 UNIX 和 Internet 安全将涵盖很多内容，并为您提供基本的 UNIX 背景。另外，如果您有多余的时间，学术地球有来自顶尖大学的免费视频讲座。
Priactical UNIX and Internet Security will cover a lot of that stuff and give you a basic UNIX background. Also, if you have extra time Academic Earth has free video lectures from top universities.