NDLI: Message authentication by integrity with public corroboration

Please wait, while we are loading the content...

Internet instability and disturbance: goal or menace?

Diversity as a computer defense mechanism

Average case vs. worst case: margins of safety in system design

Pass-thoughts: authenticating with our minds

Flooding and recycling authorizations

The insider problem revisited

Principles-driven forensic analysis

Visual security protocol modeling

Diversity: the biological perspective position statement

Divide and conquer: the role of trust and assurance in the design of secure socio-technical systems

Message authentication by integrity with public corroboration

Position: "insider" is relative

Empirical privilege profiling

"Diversity as a computer defense mechanism"

Speculative virtual verification: policy-constrained speculative execution

Software diversity: use of diversity as a defense mechanism

Use of diversity as a defense mechanism

Message authentication by integrity with public corroboration

Content Provider	ACM Digital Library
Author	van Oorschot, P. C.
Abstract	One of the best-known security paradigms is to use authentication as the basis for accéss control decisions. We turn this around, and instead rely on access control (or more precisely, integrity) as the basis for authentication. We propose a simple, practical means by which data origin assurances for message authentication are based on corroboration, for example by cross-checking with information made available by a known source or at a specified location (e.g., web page). The security relies on the integrity of this corroborating information, and thus on access control on the hosting (or publishing) of this information. We do not explicitly require cryptographic keys for the corroboration step, or for the protection of corroborating information (e.g., it may be publicly posted), and thus our paradigm allows message authentication without direct dependence on private or secret keys. It may be characterized as security by integrity. Message authentication applications we discuss include email source authentication, and data origin authentication for digital signatures. Our work thus has application to problems including spam and phishing (e.g., where email with spoofed source addressing is involved), and addresses theft, extraction, or other illicit determination of digital signature private keys.
Starting Page	57
Ending Page	63
Page Count	7
File Format	PDF
ISBN	1595933174
DOI	10.1145/1146269.1146283
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2005-09-20
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Undetected key compromise Phishing Security by integrity Data origin authentication Email source authentication Digital signatures Message authentication Spam
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in