We outline the Web technologies and the related threats within the framework of a Web threat environment. We also examine the issue surrounding dowloadable executable content and present a number of security services that can be used for Web transactions categorised according to the Internet layering model.

/pdf/addressing-threats-and-security-issues-in-world-wide-web-12omc8ivfg.pdf

Addressing Threats and Security Issues in World Wide Web Technology

Work in the area of distributed data systems have been going on for many years. Two significant contributions come from MIT and ECMA/RACE respectively. The technology from MIT was developed as part of their ATHENA project to develop technology for distributed data systems. The security part of this technology is called KERBEROS. In Europe the work started in 1986 with the development of concepts for security in distributed systems within ECMA (in TC32/TG9). In parallel a project is running under the EC RACE programme to develop the technology for implementing the ECMA concepts and draft standards in products. This project is called SESAME. This paper gives an overview of the background and current situation. It will further link the projects to international standardization and indicate the strategic direction of some of the future work.

Security in Distributed Data Systems

The Trusted Platform Module (TPM) is a hardware chip designed to enable computers to achieve a greater level of security. In the Distributed Environment all the systems are connected together with a limited bandwidth security feature. The TPM module will increase the security feature by the concept of DAA. Direct anonymous attestation (DAA) is a special digital signature primitive, which provides a balance between signer authentication and privacy. A DAA scheme involves a set of issuers, signers, and verifiers. An issuer is in charge of verifying the legitimation of signers and of issuing a DAA credential to each signer. The TPM is the real signer and holds the secret signing key. Authentication can be applied at the level of the virtual private network (VPN). As a technique of cloud service the authentication to the distributed environment can be modeled with the Trusted Platform Technology.

The privacy feature of trusted computing technology using the concept of direct anonymous attestation with cloud as a technique

In this paper, we provide a new authentication protocol in distributed systems. The proposed protocol includes two primary components. The first component is the user registration and the second component is a secure authentication mechanism. A key partition function is the primary element in user registration with which a service applicant gets his/her resource access privilege from a set of security centers. A sensitive decision function is then designed to qualify the sensitive degree of the applicant. The second component is a authentication mechanism to identify the applicant using his/her qualified key. A numeric example and two lemmas reveal the feasibility of the proposed protocol. >

Security mechanism for distributed systems

In the context of Trusted Attestation System in Cloud Computing Environment the Root of Trust for Attestation plays a vital role for security feature with Trusted Computing. The main aim of trusted attestation process is to provide an effective mechanism for the interconnected public and private systems in a well secured platform using Trusted Platform Module. The mechanism created by the trusted attestation phase gains assurance about data integrity and trustworthiness. The Trusted Attestation System enables the trusted computing functionalities for all authorized users in the current working environment. The Cloud Computing Environment extends the failure rate as attacks on public data and private data for the trusted system. The authenticated integrity state of a trusted system involves the Root of Trust for Attestation (RTA). In the cloud environment an attested user is trusted to behave with the available standard technologies like management of identity, digital signatures, exchange of credential, certificates and management of key. The trusted attestation system in the cloud environment provides Trust as a service (TaaS) for the generation of key. The credential exchange for the trusted environment enhances the facility for Cloud Computing Environment (CCE).

/pdf/trusted-attestation-system-for-cloud-computing-environment-3ilz8zm7hm.pdf

Trusted Attestation System for Cloud Computing Environment Using Trusted Platform Module

It is shown how security information for user authentication, peer-entity authentication and access control is created and utilized in large distributed systems. The protection mechanisms used are hash functions, and symmetric and asymmetric cryptography. The authors describe and combine data formats for security information based on international standards from several standardization bodies. >

C. Fritzner

Papers

Protecting security information in distributed systems