Using client puzzles to protect TLS

Proceedings of the 10th USENIX Security Symposium

Volumn , Issue , 2001, Pages

  Dean, Drew ^a   Stubblefield, Adam ^b  

^a PALO ALTO RESEARCH CENTER   (United States)

^b RICE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DIGITAL LIBRARIES; NETWORK SECURITY;

CLIENT PUZZLES; MEASUREMENTS OF; WEB SERVERS;

DENIAL-OF-SERVICE ATTACK;

EID: 85084162892     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (9)

1. The Apache HTTP server project. http://www.apache.org/httpd.html.
2. Tuomas Aura, Pekka Nikander, and Jussipekka Leiwo. Dos-resistant authentication with client puzzles. In Proceedings of the Cambridge Security Protocols Workshop 2000, LNCS, Cambridge, UK, April 2000. Springer-Verlag.
3. Cynthia Dwork and Moni Naor. Pricing via processing or combatting junk mail. In Ernest F. Brickell, editor, Proc. CRYPTO 92, pages 139-147. Springer-Verlag, 1992. Lecture Notes in Computer Science No. 740.
4. Ralf S. Engelschall. mod ssl: The Apache interface to OpenSSL. http://www.modssl.org/.
5. Ralf S. Engelschall. Openssl: The open source toolkit for SSL/TLS. http://www.openssl.org/.
6. Matthew K. Franklin and Dahlia Malkhi. Auditable metering with lightweight security. Journal of Computer Security, 6(4):237-255, 1998.
7. Ari Juels and John Brainard. Client puzzles: A cryptographic defense against connection depletion attacks. In S. Kent, editor, Proceedings of NDSS '99, pages 151-165, 1999.
8. R. C. Merkle. Secure communications over insecure channels. Communications of the ACM, 21:294-299, April 1978.
9. Ronald L. Rivest, Adi Shamir, and David A. Wagner. Time-lock puzzles and timed-release cryptography. (Preliminary version posted on the web by Rivest).