An alternative version of HTTPS to provide non-repudiation security property
| Autor: | Michel Riveill, Yoann Bertrand, Stassia Resondry, Michel Kamel, Karima Boudaoud |
|---|---|
| Rok vydání: | 2014 |
| Předmět: |
Computer science
Mobile computing Covert channel 0102 computer and information sciences 02 engineering and technology Computer security computer.software_genre Internet security Asset (computer security) 01 natural sciences Security testing Security information and event management Security association 0202 electrical engineering electronic engineering information engineering Cloud computing security business.industry 020206 networking & telecommunications Information security Computer security model Security service 010201 computation theory & mathematics Network Access Control Security through obscurity The Internet business Communications protocol computer Mobile device Computer network |
| Zdroj: | IWCMC |
| DOI: | 10.1109/iwcmc.2014.6906413 |
| Popis: | The number of mobile devices connected to the Internet is rapidly growing, inducing security issues that cannot be prevented by common mechanisms such as HTTPS. Indeed, mobile environments require light algorithms that can reduce the power-consumption and extend battery life. Moreover, HTTPS does not offer fine-grained control over the security properties such as integrity, confidentiality or authenticity. This lack of flexibility can be problematic for both power-consumption and security robustness. To overcome these issues, we have proposed in previous works a modular architecture, called LECCSAM, based on security components to secure any communication protocol by adding the required security properties. In the context of HTTP, it provides an alternative version of HTTPS by adding the integrity, confidentiality, and authenticity properties to HTTP separately or in block (i.e. only one property or any combinations of two or more properties), depending on the user needs and usage context. In this paper, we propose to extend this alternative version of HTTPS with the non-repudiation property. Preliminary results of the performance evaluation are encouraging. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|