WebSite Logo
  • Content
  • Similar Resources
  • Metadata
  • Cite This
  • Log-in
  • Fullscreen
Log-in
Do not have an account? Register Now
Forgot your password? Account recovery
  1. Transactions on Information and System Security (TISSEC)
  2. ACM Transactions on Information and System Security (TISSEC) : Volume 8
  3. Issue 2, May 2005
  4. Trusted paths for browsers
Loading...

Please wait, while we are loading the content...

ACM Transactions on Information and System Security (TISSEC) : Volume 18
ACM Transactions on Information and System Security (TISSEC) : Volume 17
ACM Transactions on Information and System Security (TISSEC) : Volume 16
ACM Transactions on Information and System Security (TISSEC) : Volume 15
ACM Transactions on Information and System Security (TISSEC) : Volume 14
ACM Transactions on Information and System Security (TISSEC) : Volume 13
ACM Transactions on Information and System Security (TISSEC) : Volume 12
ACM Transactions on Information and System Security (TISSEC) : Volume 11
ACM Transactions on Information and System Security (TISSEC) : Volume 10
ACM Transactions on Information and System Security (TISSEC) : Volume 9
ACM Transactions on Information and System Security (TISSEC) : Volume 8
Issue 4, November 2005
Issue 3, August 2005
Issue 2, May 2005
Trusted paths for browsers
X-GTRBAC: an XML-based policy specification framework and architecture for enterprise-wide access control
A pairwise key predistribution scheme for wireless sensor networks
Issue 1, February 2005
ACM Transactions on Information and System Security (TISSEC) : Volume 7
ACM Transactions on Information and System Security (TISSEC) : Volume 6
ACM Transactions on Information and System Security (TISSEC) : Volume 5
ACM Transactions on Information and System Security (TISSEC) : Volume 4
ACM Transactions on Information and System Security (TISSEC) : Volume 3
ACM Transactions on Information and System Security (TISSEC) : Volume 2
ACM Transactions on Information and System Security (TISSEC) : Volume 1

Similar Documents

...
Off-Path TCP Injection Attacks

Article

...
Puppetnets: Misusing Web Browsers as a Distributed Attack Infrastructure

Article

...
Secure sessions for Web services

Article

...
Trust management for IPsec

Article

...
Trusted Paths for Browsers (2002)

Article

...
Trusted Paths for Browsers (2002)

Article

...
Browser-to-Browser Security Assurances for WebRTC

Article

...
Maintaining control while delegating trust: Integrity constraints in trust management

Article

...
Designing and Implementing the OP and OP2 Web Browsers

Article

Trusted paths for browsers

Content Provider ACM Digital Library
Author Smith, Sean Ye, Zishuang (Eileen) Anthony, Denise
Copyright Year 2005
Abstract Computer security protocols usually terminate in a computer; however, the human-based services which they support usually terminate in a human. The gap between the human and the computer creates potential for security problems. We examine this gap, as it is manifested in secure Web servers. Felten et al. demonstrated the potential, in 1996, for malicious servers to impersonate honest servers. In this paper, we show how malicious servers can still do this---and can also forge the existence of an SSL session and the contents of the alleged server certificate. We then consider how to systematically $\textit{defend}$ against Web spoofing, by creating a trusted path from the browser to the human user. We present potential designs, propose a new one, prototype it in open-source Mozilla, and demonstrate its effectiveness via user studies.
Starting Page 153
Ending Page 186
Page Count 34
File Format PDF
ISSN 10949224
e-ISSN 15577406
DOI 10.1145/1065545.1065546
Volume Number 8
Issue Number 2
Journal ACM Transactions on Information and System Security (TISSEC)
Language English
Publisher Association for Computing Machinery (ACM)
Publisher Date 2005-05-01
Publisher Place New York
Access Restriction One Nation One Subscription (ONOS)
Subject Keyword HCISEC Trust path Web browser security
Content Type Text
Resource Type Article
Subject Computer Science Safety, Risk, Reliability and Quality
  • About
  • Disclaimer
  • Feedback
  • Sponsor
  • Contact
  • Chat with Us
About National Digital Library of India (NDLI)
NDLI logo

National Digital Library of India (NDLI) is a virtual repository of learning resources which is not just a repository with search/browse facilities but provides a host of services for the learner community. It is sponsored and mentored by Ministry of Education, Government of India, through its National Mission on Education through Information and Communication Technology (NMEICT). Filtered and federated searching is employed to facilitate focused searching so that learners can find the right resource with least effort and in minimum time. NDLI provides user group-specific services such as Examination Preparatory for School and College students and job aspirants. Services for Researchers and general learners are also provided. NDLI is designed to hold content of any language and provides interface support for 10 most widely used Indian languages. It is built to provide support for all academic levels including researchers and life-long learners, all disciplines, all popular forms of access devices and differently-abled learners. It is designed to enable people to learn and prepare from best practices from all over the world and to facilitate researchers to perform inter-linked exploration from multiple sources. It is developed, operated and maintained from Indian Institute of Technology Kharagpur.

Learn more about this project from here.

Disclaimer

NDLI is a conglomeration of freely available or institutionally contributed or donated or publisher managed contents. Almost all these contents are hosted and accessed from respective sources. The responsibility for authenticity, relevance, completeness, accuracy, reliability and suitability of these contents rests with the respective organization and NDLI has no responsibility or liability for these. Every effort is made to keep the NDLI portal up and running smoothly unless there are some unavoidable technical issues.

Feedback

Sponsor

Ministry of Education, through its National Mission on Education through Information and Communication Technology (NMEICT), has sponsored and funded the National Digital Library of India (NDLI) project.

Contact National Digital Library of India
Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302
See location in the Map
03222 282435
Mail: support@ndl.gov.in
Sl. Authority Responsibilities Communication Details
1 Ministry of Education (GoI),
Department of Higher Education
Sanctioning Authority https://www.education.gov.in/ict-initiatives
2 Indian Institute of Technology Kharagpur Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project https://www.iitkgp.ac.in
3 National Digital Library of India Office, Indian Institute of Technology Kharagpur The administrative and infrastructural headquarters of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
4 Project PI / Joint PI Principal Investigator and Joint Principal Investigators of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
Prof. Saswat Chakrabarti  will be added soon
5 Website/Portal (Helpdesk) Queries regarding NDLI and its services support@ndl.gov.in
6 Contents and Copyright Issues Queries related to content curation and copyright issues content@ndl.gov.in
7 National Digital Library of India Club (NDLI Club) Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach clubsupport@ndl.gov.in
8 Digital Preservation Centre (DPC) Assistance with digitizing and archiving copyright-free printed books dpc@ndl.gov.in
9 IDR Setup or Support Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops idr@ndl.gov.in
I will try my best to help you...
Cite this Content
Loading...