1. Email Security
Laleh Tashakori

2. > > > <
.> > > > >
>> Web Base
> > >> >
> > >. >
: @> >
@
> >
. > >

3. An overview of
Internet E-mail

4. .> > @ >
. (MIT @ >) (CU @ >) >
.> CUHK :1 •
. > >@ @ CUHK :2 •
> MIT > > :3 •
.

5. > > @ @ >
: >
@ SMTP •
> @ POP •
> IMAP •

6. Secrecy

7. > > @ > >> >
> > > > >
: > >> .
. > > ▫
.> > >> > > ▫

8. Integrity

9. > .> > >
@ > >
>. >
. > > @
> @
> > > .
>> . > @ > >
> >
. >

10. Solutions for Security
Problems in Internet E-
E-
mail Provided by ITSC

11. Outlook @ @ :
POP IMAP @ > Netscap Express
. > >
>@ @
@ >> .> Mail Server
. > @

12. @ @
. > IMAP/POP
Support Secure Support Secure
IMAP? POP?
Netscape 6 or above Yes No
Outlook Express 5.0 or above Yes Yes
Netscape 4.7 No No
Eudora 5.1 No No

13. IMAP/POP > @ Outlook Express 5.x •
Tools @ > > Outlook Express ▫
. Accounts

14. > > Mail ▫
. Properties

15. . POP IMAP @ ▫
@ POP IMAP @
@ @ .
. @

16. : •
@ @
@ @ @ .
:
Netscape Messenger 4.5 ▫
Microsoft Outlook Express 4.0 ▫

17. Digital Certificates and
keys

18. @ @
@ .
@ @ . Spammer
:
SMIME @
PGP
SMIME @
Hotmail @ .
. @ @ @

19. @
.
.
@ •
@ .
. @
@
.
.

20. .
@
.
@
:
.
.
( ) @ .
@
32
@ @ .
.

21. @
@ . “ @ “
@
@ . @
Certificate .
. Authorities
Mozilla Netscape Messenger @ SMIME
Eudora. Outlook Express Thunderbird
. PGP SMIME

22. Weaknesses of digital keys

23. . •
•
.
•
.
@ •
.

24. . •
@ •
.
. @ •
Spam

25. PGP

26. @ SMIME @
@ PGP.
Eudora Internet Explorer
PGP . Netscape
@ . Outlook Eudora Netscape
PGP PGPI
. Thunderbird Mozilla @ PGP.

27. Mobile email security

28. .
@ .
. @

29. Mail.app @
Account .
SMTP POP IMAP @ @
@ @ .
.
. SSL/TLS @
.

30. @ Safari
Web Server Mail Server @ AES 128-bit
.
Internet Explorer AES 256-bit
@ . Win XP
. 128 @

31. @
: @ .
Spam @
@
SMIME @ PGP
@ @ @

32. Encryption

33. Digital Signature
Public Key Private Key
Public Key PKI Private Key
can be distributed Public Key Infrustracture should be secret

34. Encryption
@
@ (Encrypted)

35. Certification

36. None Secure Model
Receiving
Bob John
:
. -
. @ -
Hacker

37. Secure Model
Bob John
. . ” “-
. -
. -
” “@ @ -
.
-
( )” “
.
. -
Hacker . ( )” “

38. Signed by His
Private Key
A
Encrypted by
B,C,D,F
Public Key
B C D E F
. @

39. Server

40. ISP
Router
Client DNS server
Yahoo mail
server
Yahoo login page

41. ISP
Router
Client DNS server
Yahoo mail
server
Yahoo fake
server
Yahoo fake login page

42. None Secure Model
Data Exchanging
Client Server
http session pocket User name : --
Password : ---
Catch user User name : administrator
Sniffer Confidential
Information Password : =44gtfDs43
Can affect Changing Password-
information Using the account Resources-

43. Secure Model
Data Exchanging
Client
https session pocket Server
Can not read data because
he doesn’t have the server’s
Sniffer private key .

44. . @

45. @

46. @