Authentication for distributed web caches

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2502, Issue , 2002, Pages 126-146

  Giles, James ^a   Sailer, Reiner ^a   Verma, Dinesh ^a   Chari, Suresh ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Authentication; CDN; Cookies; Distributed applications; Security

Indexed keywords

AUTHENTICATION; DIGITAL LIBRARIES;

ACCESS CONTROL POLICIES; COOKIES; DISTRIBUTED APPLICATIONS; DISTRIBUTED SYSTEM ARCHITECTURE; DISTRIBUTED SYSTEM SECURITY; SECURITY; SECURITY ARCHITECTURE; TRUSTWORTHY SYSTEMS;

SECURITY SYSTEMS;

EID: 84956979963     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-45853-0_8     Document Type: Conference Paper

References (25)

1. [1] Akamai Technologies, Inc. Freeflow content distribution service. http://www.akamai.com.
2. [2] Speedera. SpeedCharge for Site Delivery. http://www.speedera.com.
3. [3] T.H. Ptacek and T. N. Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection, 1998. http://secinf.net/info/ids/idspaper/idspaper.html.
4. [4] J. Dyer, R. Perez, R. Sailer, and L. van Doorn. Personal firewalls and intrusion detection systems. In 2nd Australian Information Warfare & Security Conference (IWAR), November 2001.
5. [5] USENIX. USENIX online library and index. http://www.usenix.org/publications/library/index.html.
6. [6] K. Fu, E. Sit, K. Smith, and N. Feamster. Dos and don’ts of client authentication on the web. In The 10th USENIX Security Symposium. USENIX, August 2001.
7. [7] D. Kristol and L. Montulli. HTTP state management mechanism, February 1997. Request for Comment 2109, Network Working Group.
8. [8] J. Kohl and C. Neuman. Kerberos network authentication service (V5), September 1993. Request for Comment 1510, Network Working Group.
9. [9] O. Kornievskaia, P. Honeyman, B. Doster, and K. Coffman. Kerberized credential translation: A solution to web access control. In The 10th USENIX Security Symposium. USENIX, August 2001.
10. [10] Microsoft Corporation.NET Passport 2.0 Technical Overview. http://www.microsoft.com/myservices/passport/technical.doc, October 2001.
11. [11] T. Berners-Lee, R. Fielding, and H. Frystyk. Hypertext transfer protocol–HTTP/1.0, May 1996. Request for Comment 1945, Network Working Group.
12. [12] R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee. Hypertext transfer protocol–HTTP/1.1, June 1999. Request for Comment 2616, Network Working Group.
13. [13] A. Freier, P. Karlton, and P. Kocher. The SSL protocol version 3.0, November 1996. http://home.netscape.com/eng/ssl3/draft302.txt.
14. [14] T. Dierks and C. Allen. The TLS protocol version 1.0, January 1999. Request for Comment 2246, Network Working Group.
15. [15] S. Kent and R. Atkinson. Security architecture for the internet protocol, November 1998. Request for Comment 2401, Network Working Group.
16. [16] A. Gulbrandsen, T. Technologies, P. Vixie, and L. Esibov. A DNS RR for specifying the location of services (DNS SRV), February 2000. Request for Comment 2782, Network Working Group.
17. [17] T. Brisco. DNS support for load balancing, April 1995. Request for Comment 1794, Network Working Group.
18. [18] R. Rivest. The MD5 message-digest algorithm, April 1992. Request for Comment 1321, Network Working Group.
19. [19] D. Wallner, E. Harder, and R. Agee. Key management for multicast: Issues and architectures, June 1999. Request for Comment 2627, Network Working Group.
20. [20] J. Saltzer. Protection and the Control of Information Sharing in MULTICS. Communications of the ACM, 17:388–402, 1974.
21. [21] A. Tanenbaum, S. Mullender, and R. Renesse. Using sparse capabilities in a distributed operating system. In The 6th IEEE Conference on Distributed Computing Systems. IEEE, June 1986.
22. [22] Apache project. http://www.apache.org.
23. [23] OpenLDAP project. http://www.openldap.org.
24. [24] E.R. Verheul, A.K. Lenstra. Selecting cryptographic key sizes. http://www.cryptosavvy.com/Joc.pdf.
25. [25] E. Amoroso. Fundamentals of Computer Security Technology. Prentice Hall, 1994.