Author | Conference | Journal | Organization | Year | DOI
Look for results that meet for the following criteria:
Academic
Publications
An integrated approach to cryptographic mitigation of denial-of-service attacks
Edit
An integrated approach to cryptographic mitigation of denial-of-service attacks   (Citations: 1)
BibTex | RIS | RefWorks Download
Gradual authentication is a principle proposed by Meadows as a way to tackle denial-of-service attacks on network protocols by gradually increasing the confidence in clients before the server commits resources. In this paper, we propose an efficient method that allows a defending server to authenticate its clients gradually with the help of some fast-to-verify measures. Our method integrates hash-based client puzzles along with a special class of digital signatures supporting fast verification. Our hash-based client puzzle provides finer granularity of difficulty and is proven secure in the puzzle difficulty model of Chen et al. (2009). We integrate this with the fast-verification digital signature scheme proposed by Bernstein (2000, 2008). These schemes can be up to 20 times faster for client authentication compared to RSA-based schemes. Our experimental results show that, in the Secure Sockets Layer (SSL) protocol, fast verification digital signatures can provide a 7% increase in connections per second compared to RSA signatures, and our integration of client puzzles with client authentication imposes no performance penalty on the server since puzzle verification is a part of signature verification.
Published in 2011.
Cumulative Annual
View Publication
The following links allow you to view full publications. These links are maintained by other sources not affiliated with Microsoft Academic Search.
    • ...Client puzzles were first proposed by Dwork and Naor [12] to control junk email by having recipients only accept emails if they were accompanied by a correct puzzle solution, and have since been extended to protect cryptographic protocols such as authentication [13], [14] and key exchange [15], [16] protocols, as well as network protocols such as TCP [17] and TLS [18], [19]...

    Suriadi Suriadi, et al. Defending Web Services against Denial of Service Attacks Using Client ...

Order by:

Citations (1)

Share this on | Contribute to Academic