Global authentication in an untrustworthy world

14th Workshop on Hot Topics in Operating Systems, HotOS 2013

Volumn , Issue , 2013, Pages

  Abadi, Martín ^a   Birrell, Andrew ^a   Mironov, Ilya ^a   Wobber, Ted ^a   Xie, Yinglian ^a  

^a MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MACHINERY;

ANALYSIS TECHNIQUES; AUTHENTICATION SCHEME; DOMAIN NAME SERVICE; GLOBAL AUTHENTICATION; LARGE DATABASE; TRUST RELATIONSHIP; X.509 CERTIFICATES;

AUTHENTICATION;

EID: 85092786374     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (15)

1. A. Birrell, B. Lampson, R. Needham, M. Schroeder. A Global Authentication Service without Global Trust. In IEEE Symposium in Security and Privacy. 1986.
2. CA/Browser Forum. Guidelines For The Issuance And Management Of Extended Validation Certificates, v.1.4. https://cabforum.org. 2012.
3. CA/Browser Forum. Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates, v.1.1. https://cabforum.org. 2012.
4. S. Chockani, W. Ford, R. Sabett, C. Merrill, S. Wu. Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework. http://tools.ietf.org/pdf/rfc3647.pdf. 2013.
5. D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R. Housley, W. Polk. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. http://tools.ietf.org/pdf/rfc5280.pdf. 2008.
6. P. Eckersley, J. Burns. The EFF SSL Observatory. https://www.eff.org/observatory. 2010.
7. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, T. Ylonen. SPKI Certificate Theory. http://tools.ietf.org/pdf/rfc2693.pdf. 1999.
8. C. Evans, C. Palmer, R. Sleevi. Public Key Pinning Extension for HTTP. http://datatracker.ietf.org/ 2012.
9. Fox-IT BV. Black Tulip Report of the investigation into the DigiNotar Certificate Authority breach. http://www.rijksoverheid.nl/bestanden/documenten-en-publicaties/rapporten/2012/08/13/black-tulipupdate/black-tulip-update.pdf. 2012.
10. D. Goodin. Crypto breakthrough shows Flame was designed by world-class scientists. http://arstechnica.com/security/2012/06/flamecrypto-breakthrough/. 2012.
11. P. Hoffman, J. Schlyter. The DNS-Based Authentication of Named Entities (DANE). http://tools.ietf.org/pdf/rfc6698.pdf. 2012.
12. B. Lampson, M. Abadi, M. Burrows, E. Wobber. Authentication in distributed systems: theory and practice. In ACM TOCS 10(4). 1992.
13. S. Mendes, C. Huitema. A New Approach to the X.509 Framework: Allowing a Global Authentication Infrastructure without a Global Trust Model. In Proceedings of the Symposium on Network and Distributed Systems Security. 1995.
14. Microsoft. Flame malware collision attack explained. http://blogs.technet.com/b/srd/archive/2012/06/06/more-information-about-the-digitalcertificates-used-to-sign-the-flame-malware.aspx. 2012.
15. D. Wendlandt, D. Andersen, A. Perrig. Perspectives: Improving SSH-style Host Authentication with Multi-Path Probing. In Proc. USENIX Annual Technical Conference. 2008.