Vulnerability analysis of certificate graphs

International Journal of Security and Networks

Volumn 1, Issue 1-2, 2006, Pages 13-23

  Gouda, Mohamed G ^b  

^a EJ)   (United States)

^b University of Texas at Austin   (United States)

Author keywords

authentication; certificate graph; certificate system; security; vulnerability

Indexed keywords

EID: 56849130276     PISSN: 17478405     EISSN: 17478413     Source Type: Journal    
DOI: 10.1504/ijsn.2006.010820     Document Type: Article

References (19)

1. Adams, C., Farrell, S., Kause, T. and Mononen, T. (1999) Internet X.509 Public Key Infrastructure – Certificate Management Protocol (CMP), RFC 2510.
2. Beth, T., Borcherding, M. and Klein, B. (1994) Valuation of Trust in Open Networks. In ESORICS ’94 LNCS 875, Springer-Verlag.
3. Capkun, S., Buttyán, L. and Hubaux, J-P. (2002) ‘Small worlds in security systems: an analysis of the PGP certificate graph’, Proceedings of the ACM New Security Paradigms Workshop, ACM Press.
4. Dierks, T. and Rescorla, E. (2004) ‘The TLS protocol version 1.1’, Internet Draft (draft-ietf-tls-rfc2246-bis-08.txt).
5. Ellison, C. (1999) SPKI Requirements, RFC 2692.
6. Gouda, M.G. and Jung, E. (2005) ‘Vulnerability analysis of certificate graphs’, Technical Report TR05-13, Department of Computer Sciences, UT Austin.
7. Hubaux, J-P. Buttyán, L. and Capkun, S. (2001) ‘The quest for security in mobile ad hoc networks’, MobiHoc 2001, ACM Press.
8. Jung, E. Elmallah, E.S. and Gouda, M.G. (2004) Optimal dispersal of certificate chains in DISC ‘04. Springer-Verlag.
9. Kohlas, R. and Maurer, U. (2000) ‘Confidence valuation in a public-key infrastructure based on uncertain evidence’, Proceedings of PKC 2000, LNCS 1751, Springer-Verlag.
10. Levin, R. and Aiken, A. (1998) ‘Attack resistant trust metrics for public key certifications’, Proceedings of the Seventh USENIX Security Symposium.
11. Maurer, U. (1996) ‘Modeling a public-key infrastructure’, Proceedings of ESORICS ’96, Springer-Verlag.
12. Reiter, M.K. and Stubblebine, S.G. (1998) ‘Resilient authentication using path independence’, IEEE Transactions on Computers, Vol. 47, No. 12, pp.1351–1362.
13. Reiter, M.K. and Stubblebine, S.G. (1999) ‘Authentication metric analysis and design’, ACMTISSEC, Vol. 2, No. 2, pp.138–158.
14. Rivest, R.L. and Lampson, B. (1996) ‘SDSI – a simple distributed security infrastructure’, Presented at CRYPTO ’96 Rumpsession.
15. Tarah, A. and Huitema, C. (1992) ‘Associating metrics to certification paths’, ESORICS ’92 LNCS 648, Springer-Verlag.
16. Watts, D. (1999) Small Worlds, Princeton University Press.
17. Zheng, H., Omura, S., Uchida, J. and Wada, K. (2004) ‘An optimal certificate dispersal algorithm for mobile ad hoc networks’, Proceedings of ISPDC/HeteroPar ’04.
18. Zimmerman, P. (1995) The Official PGP User’s Guide, MIT Press.
19. This work was done while Eunjin Jung was in UT Austin.