SNP: an interface for secure network programming

Authors:
Thomas Y. C. Woo;Raghuram Bindignavle;Shaowen Su;Simon S. Lam
Affiliations:
Department of Computer Sciences, The University of Texas at Austin, Austin, Texas;Department of Computer Sciences, The University of Texas at Austin, Austin, Texas;Department of Computer Sciences, The University of Texas at Austin, Austin, Texas;Department of Computer Sciences, The University of Texas at Austin, Austin, Texas
Venue:
USTC'94 Proceedings of the USENIX Summer 1994 Technical Conference on USENIX Summer 1994 Technical Conference - Volume 1
Year:
1994

Citing 11
Cited 1

Authentication in distributed systems: theory and practice

SOSP '91 Proceedings of the thirteenth ACM symposium on Operating systems principles
Authentication for Distributed Systems

Computer
Understanding DCE

Understanding DCE
Authentication in distributed systems: theory and practice

ACM Transactions on Computer Systems (TOCS)
Authentication in the Taos operating system

SOSP '93 Proceedings of the fourteenth ACM symposium on Operating systems principles
Secure communication using remote procedure calls

ACM Transactions on Computer Systems (TOCS)
A method for obtaining digital signatures and public-key cryptosystems

Communications of the ACM
Using encryption for authentication in large networks of computers

Communications of the ACM
Authentication Revisited

Computer
KryptoKnight Authentication and Key Distribution System

ESORICS '92 Proceedings of the Second European Symposium on Research in Computer Security
Authentication and authorization in distributed systems

Authentication and authorization in distributed systems

Secure collaborative cloud design for global USN services

ICCCI'10 Proceedings of the Second international conference on Computational collective intelligence: technologies and applications - Volume PartI

Quantified Score

Hi-index	0.00

Visualization

Abstract

SNP provides a high-level abstraction for secure end-to-end network communications. It supports both stream and datagram semantics with security guarantees (e.g., data origin authenticity, data integrity and data confidentiality). It is designed to resemble the Berkeley sockets interface so that security can be easily retrofitted into existing socket programs with only minor modifications. SNP is built on top of GSS-API, thus making it relatively portable across different authentication mechanisms conforming to GSS-API. SNP hides the details of GSS-API (e.g., credentials and contexts management), the communication sublayer as well as the cryptographic sublayer from the application programmers. It also encapsulates security sensitive information, thus preventing accidental or intentional disclosure by an application program.