NDLI: Performance analysis for extended TLS with mutual attestation for platform integrity assurance

Content Provider	IEEE Xplore Digital Library
Author	Abd Aziz, N. Udzir, N.I. Mahmod, R.
Copyright Year	2014
Description	Author affiliation: Fac. of Comput. Sci. & Inf. Technol., Univ. Putra Malaysia, Serdang, Malaysia (Abd Aziz, N.; Udzir, N.I.; Mahmod, R.)
Abstract	A web service is a web-based application connected via the internet connectivity. The common web-based applications are deployed using web browsers and web servers. However, the security of Web Service is a major concern issues since it is not widely studied and integrated in the design stage of Web Service standard. They are add-on modules rather a well-defined solutions in standards. So, various web services security solutions have been defined in order to protect interaction over a network. Remote attestation is an authentication technique proposed by the Trusted Computing Group (TCG) which enables the verification of the trusted environment of platforms and assuring the information is accurate. To incorporate this method in web services framework in order to guarantee the trustworthiness and security of web-based applications, a new framework called TrustWeb is proposed. The TrustWeb framework integrates the remote attestation into SSL/TLS protocol to provide integrity information of the involved endpoint platforms. The framework enhances TLS protocol with mutual attestation mechanism which can help to address the weaknesses of transferring sensitive computations, and a practical way to solve the remote trust issue at the client-server environment. In this paper, we describe the work of designing and building a framework prototype in which attestation mechanism is integrated into the Mozilla Firefox browser and Apache web server. We also present framework solution to show improvement in the efficiency level.
Starting Page	13
Ending Page	18
File Size	1026416
Page Count	6
File Format	PDF
e-ISBN	9781479936694
DOI	10.1109/CYBER.2014.6917428
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-06-04
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Web servers Browsers Security Principal component analysis
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Improved TLS protocol for platform integrity assurance using mutual attestation

B-IRP: An Improving Integrity Report Protocol for Remote Attestation

A Trusted Remote Attestation Model Based on Trusted Computing

Attestation with trusted configuration machine

A bare PC TLS Webmail Server

A novel secure protocol called FSSL using fuzzy controller for Web security

Mutual Attestation Using TPM for Trusted RFID Protocol

Security analysis of TLS authentication

Improving the scalability of platform attestation

Performance analysis for extended TLS with mutual attestation for platform integrity assurance

Similar Documents

Improved TLS protocol for platform integrity assurance using mutual attestation

B-IRP: An Improving Integrity Report Protocol for Remote Attestation

A Trusted Remote Attestation Model Based on Trusted Computing

Attestation with trusted configuration machine

A bare PC TLS Webmail Server

A novel secure protocol called FSSL using fuzzy controller for Web security

Mutual Attestation Using TPM for Trusted RFID Protocol

Security analysis of TLS authentication

Improving the scalability of platform attestation

Performance analysis for extended TLS with mutual attestation for platform integrity assurance