NDLI logo
  • Content
  • Similar Resources
  • Metadata
  • Cite This
  • Log-in
  • Fullscreen
Log-in
Do not have an account? Register Now
Forgot your password? Account recovery
  1. Proceedings of the 4th Annual ACM Conference on Research in Information Technology (RIIT '15)
  2. Certification with Multiple Signatures
Loading...

Please wait, while we are loading the content...

Framework for Autonomous Delivery Drones
Evolution of Cybersecurity Issues In Small Businesses
Certification with Multiple Signatures
Defending Your Android App
Validating the Assessment Metrics for Mobile Health Apps: Preliminary Outcomes from a Pilot Study
A Man-in-the-Middle attack against OpenDayLight SDN controller
Information Technology Research in the Academy: Insights from Theses and Dissertations
An Open-Source Honeynet System to Study System Banner Message Effects on Hackers
Secure and Smart Media Sharing Based on a Novel Mobile Device-to-Device Communication Framework with Security and Procedures
Developing Automated Input Generator for Android Mobile Device to Evaluate Malware Behavior
MP3 Steganography Techniques
A Study on Botnets Utilizing DNS
Studying the Effect of Multi-Query Functionality on a Correlation-Aware SQL-To-MapReduce Translator

Similar Documents

...
Trust views for the web pki.

Article

...
Using multiple cryptographic modules for server-based certificate validation system

Article

...
Optimized Public Key Infrastructure A PKI to Support Efficient Document’s Signatures

...
Analysis of Security of PKI Operation with Multiple CP/CPS Based on Level of Assurance

Article

...
Federal public key infrastructure (pki) technical specification: part d - interoperability profiles.

...
PKI and digital certification infrastructure

Article

...
Use of nested certificates for efficient, dynamic and trust preserving public key infrastructure.

Article

...
Beacon certificate push revocation

Article

...
Good practices for Long-Term Key Management in a Public Key Infrastructure

Article

Certification with Multiple Signatures

Content Provider ACM Digital Library
Author Wang, Xinli Bai, Yan Hu, Lihui
Abstract Certificate Authority (CA) is a single point of failure in the design of Public Key Infrastructure (PKI). A single compromised CA breaks the entire infrastructure. The disclosed CA key can be used by adversaries to issue rogue certificates for any domains without the consent of the domain owners. These rogue certificates have been used in Man-in-the-Middle (MitM) attacks. Studies have been conducted to prevent and reduce the damages of breached CAs and rogue certificates in different ways. However, few have a mechanism to fully and efficiently verify whether a CA or a certificate can be trusted or not. There is a need to develop new methods to ensure certificates with a high level of trustworthy in order for the PKI to be more resistant to compromised CAs and rogue certificates. We propose an alternative approach to mitigate the issue of CA breaches by imposing multiple signatures on a server certificate. This is analogous with the redundancy approach that is commonly adopted in the practice of IT management. Since CAs are run and managed by independent organizations, the probability of breaking multiple CAs in a short period of time is reduced significantly. If S signatures are imposed on a certificate, the compromise of S-1 CAs will not break the PKI system. In this paper, we describe a framework of our approach and analyze its security. We also provide a brief overview of the most relevant counter measures against CA breaches and rogue certificates.
Starting Page 13
Ending Page 18
Page Count 6
File Format PDF
ISBN 9781450338363
DOI 10.1145/2808062.2808068
Language English
Publisher Association for Computing Machinery (ACM)
Publisher Date 2015-09-29
Publisher Place New York
Access Restriction Subscribed
Subject Keyword Bogus certificate Single point of failure Certificate with multiple signatures Public key certificate Public key infrastructure Pki
Content Type Text
Resource Type Article
  • About
  • Disclaimer
  • Feedback
  • Sponsor
  • Contact
  • Chat with Us
About National Digital Library of India (NDLI)
NDLI logo

National Digital Library of India (NDLI) is a virtual repository of learning resources which is not just a repository with search/browse facilities but provides a host of services for the learner community. It is sponsored and mentored by Ministry of Education, Government of India, through its National Mission on Education through Information and Communication Technology (NMEICT). Filtered and federated searching is employed to facilitate focused searching so that learners can find the right resource with least effort and in minimum time. NDLI provides user group-specific services such as Examination Preparatory for School and College students and job aspirants. Services for Researchers and general learners are also provided. NDLI is designed to hold content of any language and provides interface support for 10 most widely used Indian languages. It is built to provide support for all academic levels including researchers and life-long learners, all disciplines, all popular forms of access devices and differently-abled learners. It is designed to enable people to learn and prepare from best practices from all over the world and to facilitate researchers to perform inter-linked exploration from multiple sources. It is developed, operated and maintained from Indian Institute of Technology Kharagpur.

Learn more about this project from here.

Disclaimer

NDLI is a conglomeration of freely available or institutionally contributed or donated or publisher managed contents. Almost all these contents are hosted and accessed from respective sources. The responsibility for authenticity, relevance, completeness, accuracy, reliability and suitability of these contents rests with the respective organization and NDLI has no responsibility or liability for these. Every effort is made to keep the NDLI portal up and running smoothly unless there are some unavoidable technical issues.

Feedback

Sponsor

Ministry of Education, through its National Mission on Education through Information and Communication Technology (NMEICT), has sponsored and funded the National Digital Library of India (NDLI) project.

Contact National Digital Library of India
Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302
See location in the Map
03222 282435
Mail: support@ndl.gov.in
Sl. Authority Responsibilities Communication Details
1 Ministry of Education (GoI),
Department of Higher Education
Sanctioning Authority https://www.education.gov.in/ict-initiatives
2 Indian Institute of Technology Kharagpur Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project https://www.iitkgp.ac.in
3 National Digital Library of India Office, Indian Institute of Technology Kharagpur The administrative and infrastructural headquarters of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
4 Project PI / Joint PI Principal Investigator and Joint Principal Investigators of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
Prof. Saswat Chakrabarti  will be added soon
5 Website/Portal (Helpdesk) Queries regarding NDLI and its services support@ndl.gov.in
6 Contents and Copyright Issues Queries related to content curation and copyright issues content@ndl.gov.in
7 National Digital Library of India Club (NDLI Club) Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach clubsupport@ndl.gov.in
8 Digital Preservation Centre (DPC) Assistance with digitizing and archiving copyright-free printed books dpc@ndl.gov.in
9 IDR Setup or Support Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops idr@ndl.gov.in
I will try my best to help you...
Cite this Content
Loading...