...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Fortschritte der Physik >SecureGuard: A Certificate Validation System in Public Key Infrastructure
【24h】

SecureGuard: A Certificate Validation System in Public Key Infrastructure

机译：SecureGuard：公钥基础架构中的证书验证系统

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Certificate validation in public key infrastructure (PKI) is a vital phase of establishing secure connections on any network. There has been a great deal of speculation on how to efficiently validate digital certificates in PKI on which the security of network communications rests. Developing such a system is challenging because digital certificates need to be quickly and securely validated for a large number of clients in a short period of time at a low cost. On the other hand, our analysis on the TLS handshakes of the Alexa Top 1 Million domains dataset indicates that the current popular certificate validation systems cannot deliver certificate validation information to the clients in a timely fashion and suffer from high overhead at the client side, making them susceptible to a number of attacks. Motivated by these observations, we present SecureGuard, a certificate validation system that can effectively handle certificate validation during TLS handshakes. Our system utilizes Internet service providers (ISPs) as the primary entity for certificate validation exploiting the fact that any Internet access request must pass through the ISP proxy-cache servers. We provide an extensive evaluation on SecureGuard and illustrate its efficiency. Moreover, we introduce a quantitative analysis method that can investigate the costs incurred by our system and other certificate validation approaches under the same evaluation scenarios. Our implementation results demonstrate that SecureGuard is able to validate the digital certificates within a short period of time, in a secure manner, with less network overhead.
机译：公钥基础架构（PKI）中的证书验证是在任何网络上建立安全连接的重要阶段。有很多关于如何有效地验证PKI中的数字证书的大量猜测，其中网络通信的安全性休息。开发这样的系统是具有挑战性的，因为在短时间内需要快速和安全地验证数字证书，以低成本。另一方面，我们对Alexa前100万个域的TLS握手的分析表明当前流行的证书验证系统无法及时向客户提供证书验证信息，并在客户端的高度开销，制作他们容易受到许多攻击。通过这些观察结果，我们呈现SecureGuard，这是一个可以在TLS握手期间有效处理证书验证的证书验证系统。我们的系统利用Internet服务提供商（ISP）作为证书验证的主要实体，利用任何Internet访问请求必须通过ISP代理缓存服务器的事实。我们对SecureGuard提供了广泛的评估，并说明了其效率。此外，我们介绍了一种定量分析方法，可以调查我们的系统和其他证书验证方法在同一评估方案下的成本。我们的实现结果表明，SecureGuard能够以安全的方式在短时间内验证数字证书，并且网络开销较少。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号