资源描述:
《a comparison of sesame and ssl for intranet and internet security》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、ACOMPARISONOFSESAMEANDSSLFORINTRANETANDINTERNETSECURITYPaulAshleyMarkVandenwauverJorisClaessensInformationSecurityResearchCenterKatholiekeUniversiteitLeuvenSchoolofDataCommunicationsDept.Elektrotechniek,ESAT-COSICQueenslandUniversityofTechnologyKardinaa
2、lMercierlaan94GPOBox2434,Brisbane-AUSTRALIAB-3001Heverlee-BELGIUMTel.+61738641940Tel.+3216321134Fax+61732212384Fax.+3216321986ashley@t.qut.edu.aumark.vandenwauver@esat.kuleuven.ac.bejoris.claessens@esat.kuleuven.ac.beAbstractInrecentyearstherehasbeenap
3、henomenalincreaseintheuseofnetworking.BothInternetandIntranetshavebecomeastandardinfrastructuretoexchangeinformation.Duetotheirsuccessithasbecomepossibletooerservicesthatwereunthinkableveyearsago:electroniccommerce,distancelearning,remotelibraries,etc
4、.Cryptographicsolutionsareessentialtoprotectcomputerassetsandmorespecicallyforelectroniccommercetobecomesuccessful.Moreover,thefuturegrowthoftheInternetdependsonhowwellitisorwillbesecured.Twoproposalsforprovidingcryptographicprotectionfornetworksarethe
5、SESAMEse-curityarchitectureandtheSSLsolution.Thepurposeofthispaperistocomparethesetwosolutions:wheretheytintheTCP/IPmodel,whatsecurityservicestheyprovide,whatcryptographictechnologyisusedbyeachsolution,theappli-cationssupported,theavailabilityandnally
6、adescriptionoftheirlimitations.ThepapernishesbyintroducingtwoschemesfortheintegrationofSESAMEandSSL.KeywordsSESAME,SSL,Intranet,Internet,networksecurity1IntroductionIntranetsandtheInternetarecorecomponentsofmostorganisations'commu-nicationsinfrastructu
7、re.TheInternetespeciallyisseenasaneectivewaytoexchangeinformationandmoreimportantlyasamediumforelectroniccom-merce.FuturegrowthintheuseofIntranetsandtheInternetdependsveryheavilyonhowwelltheycanbesecured.NetworkscanbesecuredbysecuringAppearedinProceedi
8、ngsofthe6thIFIPWG11.1&11.2workingconference,Vienna-Budapest,September2,1998,pp60{69.particularapplicationsliketelnet,ftp,e-mail(PGP,S/MIME),orcorporateapplications.ItisalsopossibletosecureotherlayersinthenetworkinghierarchylikeIP