Keyword Search:


Bookmark and Share

Performance analysis for extended TLS with mutual attestation for platform integrity assurance

Abd Aziz, Norazah and Udzir, Nur Izura and Mahmod, Ramlan (2014) Performance analysis for extended TLS with mutual attestation for platform integrity assurance. In: 4th Annual IEEE International Conference on Cyber Technology in Automation, Control and Intelligent Systems (IEEE-CYBER 2014), 4-7 June 2014, Hong Kong, China. pp. 13-18.

[img] PDF (Abstract)
36Kb

Abstract

A web service is a web-based application connected via the internet connectivity. The common web-based applications are deployed using web browsers and web servers. However, the security of Web Service is a major concern issues since it is not widely studied and integrated in the design stage of Web Service standard. They are add-on modules rather a well-defined solutions in standards. So, various web services security solutions have been defined in order to protect interaction over a network. Remote attestation is an authentication technique proposed by the Trusted Computing Group (TCG) which enables the verification of the trusted environment of platforms and assuring the information is accurate. To incorporate this method in web services framework in order to guarantee the trustworthiness and security of web-based applications, a new framework called TrustWeb is proposed. The TrustWeb framework integrates the remote attestation into SSL/TLS protocol to provide integrity information of the involved endpoint platforms. The framework enhances TLS protocol with mutual attestation mechanism which can help to address the weaknesses of transferring sensitive computations, and a practical way to solve the remote trust issue at the client-server environment. In this paper, we describe the work of designing and building a framework prototype in which attestation mechanism is integrated into the Mozilla Firefox browser and Apache web server. We also present framework solution to show improvement in the efficiency level.

Item Type:Conference or Workshop Item (Paper)
Keyword:Web service; TLS protocol; Network security; Attestations; TrustWeb
Faculty or Institute:Faculty of Computer Science and Information Technology
Publisher:IEEE
DOI Number:10.1109/CYBER.2014.6917428
Altmetrics:http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.1109/CYBER.2014.6917428
ID Code:48020
Deposited By: Nabilah Mustapa
Deposited On:03 Aug 2016 12:37
Last Modified:03 Aug 2016 12:37

Repository Staff Only: Edit item detail

Document Download Statistics

This item has been downloaded for since 03 Aug 2016 12:37.

View statistics for "Performance analysis for extended TLS with mutual attestation for platform integrity assurance"