Attack-resistant trust metrics for public key certification

Published 26 January 1998

Raph Levien, Alex Aiken

Citations187

TL;DR

An analytical framework for understanding the effectiveness of trust metrics in resisting attacks is presented, including a characterization of the space of possible attacks, and the theoretical best case for a trust metric is established.

Abstract

This paper investigates the role of trust metrics in attack-resistant public key certification. We present an analytical framework for understanding the effectiveness of trust metrics in resisting attacks, including a characterization of the space of possible attacks. Within this framework, we establish the theoretical best case for a trust metric. Finally, we present a practical trust metric based on network flow that meets this theoretical bound. independent sources of certification, and rejects (by assigning low trust values) assertions with insufficient certification. The previous work raises many questions, including: To which kinds of attack is a trust metric resistant? Which trust metric is best? How well do these trust metrics work? 1

Keywords

Social SciencesComputer Science

Security Architecture for the Internet Protocol

2,784 Citations1995R. Atkinson

View PDF

The official PGP user's guide

896 Citations1996Philip Zimmermann

This tutorial discusses how public key cryptography works installing PGP using PGP managing keys advanced topics beware of snake oil and a peek under the hood vulnerabilities.

Lecture notes in computer scienceValuation of trust in open networks

656 Citations1994Thomas Beth, Malte Borcherding +1 more

A method for the valuation of trustworthiness which can be used to accept or reject an entity as being suitable for sensitive tasks is presented, an extension of the work of Yahalom, Klein and Beth.

View PDF

Lecture notes in computer scienceModelling a public-key infrastructure

323 Citations1996Ueli Maurer

An approach to modelling and reasoning about a PKI from a user Alice's point of view is proposed, which includes confidence values for statements and can exploit arbitrary certification structures containing multiple intersecting certification paths to achieve a higher confidence value than for any single certification path.

Lecture notes in computer scienceComputer Security — ESORICS 96

130 Citations1996Elisa Bertino, Helmut Kurth

Toward acceptable metrics of authentication

92 Citations2002M.K. Reiter, Stuart G. Stubblebine

A set of guiding principles for the design of metrics to evaluate the confidence afforded by a set of paths for authentication are developed and a direction for constructing metrics that come closer to meeting these principles is proposed.

Path independence for authentication in large-scale systems

59 Citations1997Michael K. Reiter, Stuart G. Stubblebine

This paper formalizes the problems of locating maximum sets of paths with independence properties in a graph-theoretic framework, gives evidence that they are not polynomial-time solvable, and proposes approximation algorithms for these problems.

View PDF

Lecture notes in computer scienceAssociating metrics to certification paths

31 Citations1992Anas Tarah, Christian Huitema

The Chimaera model tries to cover all X509's lacks specially for what concerns Certification Authorities CA and describes a protocol for the exchange and evaluation of both certificates and CP, Certification Paths, hence ensuring a secure propagation of trust and knowledge over the network.