Engineering SSL-based systems for enhancing system performance

Authors:
Norman Lim;Shikharesh Majumdar;Vineet Srivastava
Affiliations:
Carleton University, Ottawa, ON, Canada;Carleton University, Ottawa, ON, Canada;Cistech Limited, Ottawa, ON, Canada
Venue:
Proceedings of the 2nd ACM/SPEC International Conference on Performance engineering
Year:
2011

Citing 8
Cited 0

Quantitative system performance: computer system analysis using queueing network models

Quantitative system performance: computer system analysis using queueing network models
A method for obtaining digital signatures and public-key cryptosystems

Communications of the ACM
Inside SSL: The Secure Sockets Layer Protocol

IT Professional
Architectural Impact of Secure Socket Layer on Internet Servers

ICCD '00 Proceedings of the 2000 IEEE International Conference on Computer Design: VLSI in Computers & Processors
Selective Security for TLS

ICON '01 Proceedings of the 9th IEEE International Conference on Networks
Performance Analysis of Cryptographic Protocols on Handheld Devices

NCA '04 Proceedings of the Network Computing and Applications, Third IEEE International Symposium
Anatomy and Performance of SSL Processing

ISPASS '05 Proceedings of the IEEE International Symposium on Performance Analysis of Systems and Software, 2005
Beyond Fixed Key Size: Classifications Toward a Balance Between Security and Performance

AINA '10 Proceedings of the 2010 24th IEEE International Conference on Advanced Information Networking and Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security in a distributed system often comes at the cost of a performance penalty. Due to the CPU time consuming security algorithms used, transferring data using SSL is known to be significantly slow. This paper presents an initial set of research results of a university-industry collaborative research focusing on a performance enhancement technique called security sieve that separates the classified and non-classified components in a document and sends these on a secure and a (faster) non-secure channel respectively. Experimental results presented in the paper demonstrate the effectiveness of the technique.