Modeling and evaluation of certification path discovery in the emerging global PKI

Authors:
Meiyuan Zhao;Sean W. Smith
Affiliations:
Communications Technology Lab, Intel Corporation, Hillsboro, OR;Department of Computer Science, Dartmouth College, Hanover, NH
Venue:
EuroPKI 2006 Proceedings of the Third European conference on Public Key Infrastructure: theory and Practice
Year:
2006

Citing 4
Cited 2

Evaluating certificate status information mechanisms

Proceedings of the 7th ACM conference on Computer and communications security
Performance evaluation of distributed security protocols using discrete event simulation

Performance evaluation of distributed security protocols using discrete event simulation
Towards a framework for evaluating certificate status information mechanisms

Computer Communications
Virtual certificates and synthetic certificates: new paradigms for improving public key validation

Computer Communications

Beacon certificate push revocation

Proceedings of the 2nd ACM workshop on Computer security architectures
A calculus of trust and its application to PKI and identity management

Proceedings of the 8th Symposium on Identity and Trust on the Internet

Quantified Score

Hi-index	0.00

Visualization

Abstract

Establishing trust on certificates across multiple domains requires an efficient certification path discovery algorithm. Previously, small exmaples are used to analyze the performance of certification path discovery. In this work, we propose and implement a simulation framework and a probability search tree model for systematic performance evaluation. Built from measurement data collected from current PKI systems in development and deployment over more than 10 countries, our model is (to the best of our knowledge) the largest simulated PKI architecture to-date.