Managing the Performance Impact of Web Security

Authors:
Adam Stubblefield;Aviel D. Rubin;Dan S. Wallach
Affiliations:
Johns Hopkins University, USA;Johns Hopkins University, USA;Rice University, USA
Venue:
Electronic Commerce Research
Year:
2005

Citing 6
Cited 4

Locality-aware request distribution in cluster-based network servers

Proceedings of the eighth international conference on Architectural support for programming languages and operating systems
Web protocols and practice: HTTP/1.1, Networking protocols, caching, and traffic measurement

Web protocols and practice: HTTP/1.1, Networking protocols, caching, and traffic measurement
Improving SSL Handshake Performance via Batching

CT-RSA 2001 Proceedings of the 2001 Conference on Topics in Cryptology: The Cryptographer's Track at RSA
SSLACC: A Clustered SSL Accelerator

Proceedings of the 11th USENIX Security Symposium
Using client puzzles to protect TLS

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10
PRO-COW: Protocol compliance on the web-a longitudinal study

USITS'01 Proceedings of the 3rd conference on USENIX Symposium on Internet Technologies and Systems - Volume 3

Evaluation of the effect of SSL overhead in the performance of e-business servers operating in B2B scenarios

Computer Communications
Practical end-to-end web content integrity

Proceedings of the 21st international conference on World Wide Web
The RBAC model and implementation architecture in multi-domain environment

Electronic Commerce Research
The security service rating design for IT convergence services

Electronic Commerce Research

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security and performance are usually at odds with each other. Current implementations of security on the web have been adopted at the extreme end of the spectrum, where strong cryptographic protocols are employed at the expense of performance. The SSL protocol is not only computationally intensive, but it makes web caching impossible, thus missing out on potential performance gains. In this paper we discuss the requirements for web security and present a solution that takes into account performance impact and backwards compatibility.