UPM Institutional Repository

Performance analysis for extended TLS with mutual attestation for platform integrity assurance


Abd Aziz, Norazah and Udzir, Nur Izura and Mahmod, Ramlan (2014) Performance analysis for extended TLS with mutual attestation for platform integrity assurance. In: 4th Annual IEEE International Conference on Cyber Technology in Automation, Control and Intelligent Systems (IEEE-CYBER 2014), 4-7 June 2014, Hong Kong, China. (pp. 13-18).


A web service is a web-based application connected via the internet connectivity. The common web-based applications are deployed using web browsers and web servers. However, the security of Web Service is a major concern issues since it is not widely studied and integrated in the design stage of Web Service standard. They are add-on modules rather a well-defined solutions in standards. So, various web services security solutions have been defined in order to protect interaction over a network. Remote attestation is an authentication technique proposed by the Trusted Computing Group (TCG) which enables the verification of the trusted environment of platforms and assuring the information is accurate. To incorporate this method in web services framework in order to guarantee the trustworthiness and security of web-based applications, a new framework called TrustWeb is proposed. The TrustWeb framework integrates the remote attestation into SSL/TLS protocol to provide integrity information of the involved endpoint platforms. The framework enhances TLS protocol with mutual attestation mechanism which can help to address the weaknesses of transferring sensitive computations, and a practical way to solve the remote trust issue at the client-server environment. In this paper, we describe the work of designing and building a framework prototype in which attestation mechanism is integrated into the Mozilla Firefox browser and Apache web server. We also present framework solution to show improvement in the efficiency level.

Download File

PDF (Abstract)
Performance analysis for extended TLS with mutual attestation for platform integrity assurance.pdf

Download (37kB) | Preview

Additional Metadata

Item Type: Conference or Workshop Item (Paper)
Divisions: Faculty of Computer Science and Information Technology
DOI Number: https://doi.org/10.1109/CYBER.2014.6917428
Publisher: IEEE
Keywords: Web service; TLS protocol; Network security; Attestations; TrustWeb
Depositing User: Nabilah Mustapa
Date Deposited: 03 Aug 2016 04:37
Last Modified: 03 Aug 2016 04:37
Altmetrics: http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.1109/CYBER.2014.6917428
URI: http://psasir.upm.edu.my/id/eprint/48020
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item