New adaptive trust models against DDoS: back-up CA and mesh PKI

Authors:
Jaeil Lee;Minsoo Lee;Jabeom Gu;Seoklae Lee;Sehyun Park;JooSeok Song
Affiliations:
Korea Information Security Agency, Seoul, Korea;School of Electrical and Electronic Engineering, Chung-Ang University, Seoul, Korea;School of Electrical and Electronic Engineering, Chung-Ang University, Seoul, Korea;Korea Information Security Agency, Seoul, Korea;School of Electrical and Electronic Engineering, Chung-Ang University, Seoul, Korea;Department of Computer Science, Yonsei University, Seoul, Korea
Venue:
HSI'03 Proceedings of the 2nd international conference on Human.society@internet
Year:
2003

Citing 4
Cited 1

Walking the Web of Trust

WETICE '00 Proceedings of the 9th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises
An Efficient, Dynamic and Trust Preserving Public Key Infrastructure

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
TCP/IP Protocol Suite

TCP/IP Protocol Suite
An overview of PKI trust models

IEEE Network: The Magazine of Global Internetworking

A practical scheme of merging multiple public key infrastructures in e-commerce

ICCNMC'05 Proceedings of the Third international conference on Networking and Mobile Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Most of Public Key Infrastructures (PKIs) are based on the ITU-T X.509, and the top-down hierarchical structure is extensively employed for the PKI community. However, the prominent drawback of the hierarchical PKI structure is that the CAs can be the target of serious attacks such as Distributed Denial-of-Service (DDoS). In this paper, we present two new models, Back-up CA and Mesh PKI, to cope with such Internet attacks. The proposed Back-up CA sets up an alternative path when an original CA is under attack, consequently improving availability and flexibility. Mesh PKI is a collection of CAs dynamically linked by multiple peer-to-peer cross-certifications. The Mesh PKI is very attractive, not only because they are robust to attacks but also because they help to reduce overall certificate validation time and to balance the load across multiple CAs.