Accountability Issues in Multihop Message Communication

  • Authors:
  • Sourav Bhattacharya;Raymond Paul

  • Affiliations:
  • -;-

  • Venue:
  • ASSET '99 Proceedings of the 1999 IEEE Symposium on Application - Specific Systems and Software Engineering and Technology
  • Year:
  • 1999

Quantified Score

Hi-index 0.00

Visualization

Abstract

Accountability (aka. Non-repudiation, or NRP) IS a key component of information systems security. and it is a stated need m the Orange Book guidelines for security level classifications. This paper presents a framework of the "accountability"needs of a message communication system. In particular, we demonstrate that the traditional approach of Digital Signature (DS) based solutions to thweb accountability needs of a message communication system is only one part of the overall problem. In a multihop message delivery system (where the hops could be physically separated routers. or logically distmct multiple software modules), there can be other aspects of accountability that may not be addressed using D S techniques. We identify a specific problem, namely the Sender' s .4mbiguity Problem (SAP), that remains to be solved if a comprehensive treatment to accountability could be developed.The primary focus of this paper is to identify the SAP problem (and, hence, raise a point that DS alone cannot completely solve thweb accountability problem). Then we present an outline of our research in SAP framework. The framework includes NRP categories, NRP types of services, NRP levels of certification. Finally, we present a set of metrics that can potentially be used to assess the SAP problem, and its existence severance, in a networked or distributed system. Follow on research is required to elaborate the SAP framework.