Find results with:

Add another field

Search by date

to

Searching collections:

Dartmouth Dissertations

Add or remove collections

Home Dartmouth Dissertations Page 1

Reference URL

To link to the entire object, paste this link in email, IM or document

To embed the entire object, paste this HTML in website

To link to this page, paste this link in email, IM or document

To embed this page, paste this HTML in website

Performance evaluation of distributed security protocols using discrete event simulation.

you wish to report:

Your comment:

Your Name:

Submit

Cancel

...

Back to top

Powered by CONTENTdm®

Call No.	Ph.D. 2005
Author	Zhao, Meiyuan.
Title	Performance evaluation of distributed security protocols using discrete event simulation.
Date	2005
Abstract	The Border Gateway Protocol (BGP) that manages inter-domain routing on the Internet lacks security. Protective measures using public key cryptography introduce complexities and costs. To support authentication and other security functionality in large networks, we need public key infrastructures (PKIs). Protocols that distribute and validate certificates introduce additional complexities and costs. The certification path building algorithm that helps users establish trust on certificates in the distributed network environment is particularly complicated. Neither routing security nor PKI come for free. Prior to this work, the research study on performance issues of these large-scale distributed security systems was minimal. In this thesis, we evaluate the performance of BGP security protocols and PKI systems. We answer the questions about how the performance affects protocol behaviors and how we can improve the efficiency of these distributed protocols to bring them one step closer to reality. The complexity of the Internet makes an analytical approach difficult and the scale of Internet makes empirical approaches also unworkable. Consequently, we take the approach of simulation. We have built the simulation frameworks to model a number of BGP security protocols and the PKI system. We have identified performance problems of Secure BGP (S-BGP), a primary BGP security protocol, and proposed and evaluated Signature Amortization (S-A) and Aggregated Path Authentication (APA) schemes that significantly improve efficiency of S-BGP without compromising security. We have also built a simulation framework for general PKI systems and evaluated certification path building algorithms, a critical part of establishing trust in Internet-scale PKI, and used this framework to improve algorithm performance.
Description	xvi, 258 leaves : ill. 28 cm.
Format	application/pdf
Advisor	Sean W. Smith.
Subject	Computer networks -- Security measures. BGP (Computer network protocol). Public key infrastructure (Computer security). Discrete-time systems -- Mathematical models. Computer simulation.
College	Dartmouth College -- Department of Computer Science.
Issuing Body	Dartmouth Dissertations are made available through the Dartmouth Digital Library.
Degree	Thesis (Ph.D.)--Dartmouth College.
Copyright	All rights reserved. No part of this book may be reproduced in any form by any electronic or mechanical means without permission in writing from the author.
DOI	http://dx.doi.org/10.1349/ddlp.73

Title	Page 1
Format	application/pdf
Issuing Body	Dartmouth Dissertations are made available through the Dartmouth Digital Library.
Degree	Thesis (Ph.D.)--Dartmouth College.
Full Text	Performance Evaluation of Distributed Security Protocols Using Discrete Event Simulation A Thesis Submitted to the Faculty in partial ful llment of the requirements for the degree of Doctor of Philosophy in Computer Science by Meiyuan Zhao DARTMOUTH COLLEGE Hanover, New Hampshire October, 2005 Examining Committee: (chair) Sean W. Smith David M. Nicol David F. Kotz M. Douglas McIlroy Carlisle Adams Charles K. Barlowe, Ph.D. Dean of Graduate Studies

Find results with:

Searching collections:

Home Dartmouth Dissertations Page 1

Performance evaluation of distributed security protocols using discrete event simulation.

Object Description

Description

Performance evaluation of distributed security protocols...

Performance evaluation of distributed security protocols...

	All
	Pages Enter page numbers or page ranges separated by commas. For example: 1,3,5-12