NDLI: Framework for Intrusion Tolerant Certification Authority System Evaluation

Content Provider	IEEE Xplore Digital Library
Author	Jingqiang Lin Jiwu Jing Peng Liu
Copyright Year	2007
Description	Author affiliation: Chinese Acad. of Sci., Beijing (Jingqiang Lin; Jiwu Jing)
Abstract	Various intrusion tolerant certification authority (CA) systems have been recently proposed to provide attack resistant certificate update/query services. However, it is difficult to compare them against each other directly due to diversity in system organizations, threshold cryptography schemes, protocols and usage scenarios. We present a framework for intrusion tolerant CA system evaluation, which consists of three components, namely, an intrusion tolerant CA model, a threat model and a metric for comparative evaluation. The framework covers system organizations, protocols, usage scenarios, period of certificate validity, revocation rate and mean time to recovery (MTTR). Based on the framework, four representative CA systems are evaluated and compared in three typical usage scenarios, producing reasonable and insightful results. The inter-dependency between usage scenarios and system characteristics is investigated, providing a guideline to design better systems for different usage scenarios. The proposed framework provides an effective method to evaluate intrusion tolerant CA systems quantitatively. Moreover, the comparison results offer valuable insights to further improve the attack resilience of intrusion tolerant CA systems.
Starting Page	231
Ending Page	241
File Size	430905
Page Count	11
File Format	PDF
ISBN	076952995X
ISSN	10609857
DOI	10.1109/SRDS.2007.14
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2007-10-10
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Certification Cryptographic protocols Information security Public key Hardware Content addressable storage Public key cryptography Guidelines Resilience Data security
Content Type	Text
Resource Type	Article
Subject	Theoretical Computer Science Computer Networks and Communications Software Hardware and Architecture

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Evaluating certification authority security

Development of digital certification authority in Pakistan

Server-aided digital signature protocol based on password

A distributed certificate management system (DCMS) supporting group-based access controls

Threshold SKI Protocol for ID-based Cryptosystems

A New Authentication and Key Exchange Protocol for Insecure Networks

An overview of PKI trust models

Distributed Key Generation for the Internet

Intranet security framework based on short-lived certificates

Framework for Intrusion Tolerant Certification Authority System Evaluation

Similar Documents

Evaluating certification authority security

Development of digital certification authority in Pakistan

Server-aided digital signature protocol based on password

A distributed certificate management system (DCMS) supporting group-based access controls

Threshold SKI Protocol for ID-based Cryptosystems

A New Authentication and Key Exchange Protocol for Insecure Networks

An overview of PKI trust models

Distributed Key Generation for the Internet

Intranet security framework based on short-lived certificates

Framework for Intrusion Tolerant Certification Authority System Evaluation