Research And Implementation Of The Security Performance Of WEBMAIL System Based On S/MIME

Email is one of the most popular unsecure applications on Internet. Nowadays, the demand of communication with email is increasing quickly, and more and more secret information has been sent through the unsecurity Internet Medium such as email. Traditionally, based on MIME, email is transmitted in form of original text. The sender can easily forge information. Therefore, email is confronted with such unsecure factor as leaking, dropping, tempering, disavowing, etc. Cryptography is the key techniques to solve these information security problems.S/MIME protocol is an international standard based on data security technology of RSA. It can ensure the security of email in the process of transmission. By extending MIME, a popular form of email and processing the email data with data security algorithms, the security services including integrity, confidentiality and undeniableness can be provided by S/MIME protocol.In this paper, a client system has been developed to ensure security of email. The S/MIME protocol, SMTP protocol and POP3 protocol have been combined with this system, and triple-DES, RSA and SHA-1 algorithms have been realized to process the MIME body .This system can be used to encrypt, sign, send, receive, decrypt, and verify email, also can be used as a special client system for secure email. In this system, there are strong key is used for Triple-DES algorithm that up to 168 bits, it is used for RSA algorithm that up to 1024 bits, it is used for digital signature that 160 bits number that produces by SHA-1 algorithm. These algorithms have strong security against attack. So the email security can be ensured by them.In this thesis, The architecture of WASA(Web Application Security Architecture) is presented, which be able to adapt to almost any web applications.