Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001最新文献_第2页

Cryptographic security for mobile code 移动代码的加密安全性

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924283

Joy Algesheimer, C. Cachin, J. Camenisch, G. Karjoth

引用次数: 142

Preserving information flow properties under refinement 保持精化下的信息流属性

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924289

H. Mantel

引用次数: 90

A trend analysis of exploitations 开发趋势分析

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924300

Hilary K. Browne, W. Arbaugh, J. McHugh, William L. Fithen

引用次数: 121

Performance of public-key-enabled Kerberos authentication in large networks 大型网络中启用公钥的Kerberos身份验证的性能

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924297

Alan Harbitter, D. Menascé

引用次数: 36

SD3: a trust management system with certified evaluation SD3:具有认证评估的信任管理体系

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924291

T. Jim

引用次数: 327

Formal treatment of certificate revocation under communal access control 在公共访问控制下证书撤销的正式处理

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924292

X. Ao, N. Minsky, V. Ungureanu

{"title":"Formal treatment of certificate revocation under communal access control","authors":"X. Ao, N. Minsky, V. Ungureanu","doi":"10.1109/SECPRI.2001.924292","DOIUrl":"https://doi.org/10.1109/SECPRI.2001.924292","url":null,"abstract":"The conventional approach to distributed access control (AC) tends to be server-centric. Under this approach, each server establishes its own policy regarding the use of its resources and services by its clients. The choice of this policy, and its implementation, are generally considered the prerogative of each individual server. This approach to access control may be appropriate for many current client-server applications, where the server is an autonomous agent, in complete charge of its resources. It is not suitable for the growing class of applications where a group of servers, and sometimes their clients, belong to a single enterprise, and are subject to the enterprise-wide policy governing them all. One may not be able to entrust such an enterprise-wide policy to the individual servers, for two reasons: first, it is hard to ensure that an heterogeneous set of servers implement exactly the same policy. Second, as demonstrate, an AC policy can have aspects that cannot, in principle, be implemented by servers alone. As argued in a previous paper (Minsky, 2000), what is needed in this situation is a concept of communal policy that governs the interaction between the members of a distributed community of agents involved in some common activity along with a mechanism that provides for the explicit formulation of such policies, and for their scalable enforcement. We focus on the communal treatment of expiration and revocation of the digital certificates used for the authentication of the identity and roles of members of the community.","PeriodicalId":20502,"journal":{"name":"Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001","volume":"21 1","pages":"116-127"},"PeriodicalIF":0.0,"publicationDate":"2001-05-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"83522860","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 34

ELK, a new protocol for efficient large-group key distribution ELK是一种新的高效大群密钥分发协议

Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 Pub Date : 2001-05-14 DOI: 10.1109/SECPRI.2001.924302

A. Perrig, D. Song, J. D. Tygar

{"title":"ELK, a new protocol for efficient large-group key distribution","authors":"A. Perrig, D. Song, J. D. Tygar","doi":"10.1109/SECPRI.2001.924302","DOIUrl":"https://doi.org/10.1109/SECPRI.2001.924302","url":null,"abstract":"Secure media broadcast over the Internet poses unique security challenges. One problem is access control to a large number of subscribers in a public broadcast. A common solution is to encrypt the broadcast data and to disclose the decryption key to legitimate receivers only. However, how do we securely and efficiently establish a shared secret among the legitimate receivers? And most importantly, how can we efficiently update the group key securely if receivers join or leave? How can we provide reliability for key update messages in a way that scales up to large groups? Recent research makes substantial progress to address these challenges. Current schemes feature efficient key update mechanisms assuming that the key updates are communicated reliably to the receivers. In practice, however the principal impediment to achieve a scalable system is to distribute the key updates reliably to all receivers. We have designed and implemented ELK, a novel key distribution protocol, to address these challenges with the following features: ELK features perfectly reliable, super-efficient member joins; ELK uses smaller key update messages than previous protocols; ELK features a mechanism that allows short hint messages to be used for key recovery allowing a tradeoff of communication overhead with member computation; ELK proposes to append a small amount of key update information to data packets, such that the majority of receivers can recover from lost key update messages; and ELK allows to trade off security with communication overhead.","PeriodicalId":20502,"journal":{"name":"Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001","volume":"41 1","pages":"247-262"},"PeriodicalIF":0.0,"publicationDate":"2001-05-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"88496011","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 411