Slide 1

Slide 1 text

LLNL-PRES-740064 This work was performed under the auspices of the U.S. Department of Energy by Lawrence Livermore National Laboratory under contract DE-AC52-07NA27344. Lawrence Livermore National Security, LLC U.S. Adoption of HTTPS LLNL Cyber Fest 2017 Ian Lee Lawrence Livermore National Laboratory October 17, 2017

Slide 2

Slide 2 text

LLNL-PRES-740064 2

Slide 3

Slide 3 text

LLNL-PRES-740064 3 M-15-13: Require Secure Connections

Slide 4

Slide 4 text

LLNL-PRES-740064 4

Slide 5

Slide 5 text

LLNL-PRES-740064 5 C.I.A. (no, not that one) § Confidentiality. — The visitor’s connection is encrypted, obscuring URLs, cookies, and other sensitive metadata. § Integrity. — The data sent between the visitor and the website has not been tampered with or modified. § Authenticity. — The visitor is talking to the “real” website, and not to an impersonator or through a “man-in- the-middle”.

Slide 6

Slide 6 text

LLNL-PRES-740064 6

Slide 7

Slide 7 text

LLNL-PRES-740064 7

Slide 8

Slide 8 text

LLNL-PRES-740064 8

Slide 9

Slide 9 text

LLNL-PRES-740064 9 9

Slide 10

Slide 10 text

LLNL-PRES-740064 10

Slide 11

Slide 11 text

LLNL-PRES-740064 11

Slide 12

Slide 12 text

LLNL-PRES-740064 12

Slide 13

Slide 13 text

LLNL-PRES-740064 13 13

Slide 14

Slide 14 text

LLNL-PRES-740064 14

Slide 15

Slide 15 text

LLNL-PRES-740064 15

Slide 16

Slide 16 text

LLNL-PRES-740064 16

Slide 17

Slide 17 text

LLNL-PRES-740064 17

Slide 18

Slide 18 text

LLNL-PRES-740064 18

Slide 19

Slide 19 text

LLNL-PRES-740064 19

Slide 20

Slide 20 text

LLNL-PRES-740064 20

Slide 21

Slide 21 text

LLNL-PRES-740064 21

Slide 22

Slide 22 text

LLNL-PRES-740064 22

Slide 23

Slide 23 text

Thank you! Ian Lee – [email protected] @IanLee1521 Thank you to Eric Mill at GSA for the use of his slides as inspiration for this talk.