Securing Web servers against insider attack

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2001-January, Issue , 2001, Pages 265-276

  Jiang, Shan ^a   Smith, Sean ^a   Minami, Kazuhiro ^a  

^a Dartmouth Department of Computer Science_Dartmouth College   (United States)

Author keywords

Authentication; Computer science; Computer security; Coprocessors; Cryptography; Educational institutions; Electronic switching systems; Prototypes; Public key; Web server

Indexed keywords

AUTHENTICATION; COMPUTER SCIENCE; CRYPTOGRAPHY; SECURITY OF DATA; SECURITY SYSTEMS; WEB SERVICES; WORLD WIDE WEB;

CO-PROCESSORS; EDUCATIONAL INSTITUTIONS; ELECTRONIC SWITCHING SYSTEMS; PROTOTYPES; PUBLIC KEYS; WEB SERVERS;

HARDWARE SECURITY;

EID: 2342505463     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2001.991542     Document Type: Conference Paper

References (21)

1. L. Cranor. Electronic voting-computerized polls may save money, protect privacy. Crossroads, 2(4), April 1996
2. J. Dyer, R. Perez, S. Smith, and M. Lindemann. Application support architecture for a high-performance, programmable secure coprocessor. In 22nd National Information Systems Security Conference. National Institute of Standards and Technology, October 1999
3. A. O. Freier, P. Karlton, and P. C. Kocher. The ssl protocol version 3.0. http://home.netscape.com/eng/ssl3/draft302.txt, November 1996
4. A. Fujioka, T. Okamoto, and K. Ohta. A practical secret voting scheme for large scale elections. In Advances in Cryptology-AUSCRYPT '92, pages 244-251, 1993
5. Ibm research demonstrates linux running on secure cryptographic coprocessor. Press release, August 2001
6. S. Jiang. Webalps implementation and performance analysis: Using trusted co-servers to enhance privacy and security of web interactions. Master's thesis, Department of Computer Science, Dartmouth College, June 2001. (Available as Technical Report TR2001-399). http://www.cs.dartmouth.edu/pkilab/shan-thesis.ps
7. E. Knop. Secure public-key services for web-based mail. Senior thesis, Department of Computer Science, Dartmouth College, August 2001
8. Mudge Security devices that might not be. USENIX Login, November 2000
9. P. Neumann. Security criteria for electronic voting. In 16th National Computer Security Conference, 1993
10. H. Nurmi, A. Salomaa, and L. Santean. Secret ballot elections in computer networks. Computers and Security, 36:553-560, 1991
11. E. Rescorla. SSL and TLS: Designing and Building Secure Systems. Addison Wesley Longman, 2000
12. A. Salomaa. Verifying and recasting secret ballots in computer networks. New Results and New Trends in Computer Science, pages 283-289, 1991
13. S. Smith. Outbound authentication for programmable secure coprocessors. Technical Report TR2001-401, Department of Computer Science, Dartmouth College, March 2001. http://www.cs.dartmouth.edu/pkilab/oatr.pdf
14. S. Smith. Webalps: A survey of e-commerce privacy and security applications. ACM SIGecom Exchanges, 2(3), September 2001
15. S. Smith, R. Perez, S. Weingart, and V. Austel. Validating a high-performance, programmable secure coprocessor. In 22nd National Information Systems Security Conference. National Institute of Standards and Technology, October 1999
16. S. Smith and S. Weingart. Building a high-performance, programmable secure coprocessor. Computer Networks, 31:831-860, April 1999. Special Issue on Computer Network Security
17. S. Weingart. Physical security for the μabyss system. In Security and Privacy. IEEE, 1987
18. E. Ye. Securing browsers. Master's thesis, Department of Computer Science, Dartmouth College. In progress
19. B. Yee. Using Secure Coprocessors. PhD thesis, School of Computer Science, Carnegie Mellon University, May 1994. (Available as Technical Report CMU-CS-94-149.)
20. B. Yee and J. Tygar. Secure coprocessors in electronic commerce applications. In 1st Electronic Commerce Workshop. USENIX, 1996
21. Y. Yuan, E. Ye, and S. Smith. Web spoofing 2001. Technical Report TR2001-409, Department of Computer Science, Dartmouth College, July 2001. http://www.cs.dartmouth.edu/pkilab/demos/spoofing