| Registration | Required |
|---|---|
| File size | 104.70kb - Check your internet speed |
| File format | PDF - Download the latest version of Adobe Acrobat Reader |
ZDNet / IT Library / Security / Authentication - Encryption / PKI /
PKI and UDDI Based Trust Centre: An Attempt to Improve Web Service Security
See also
Publisher's description
Nowadays Internet becomes the most used tool for the ever increasing amount of various transactions between institutions, organizations and more generally between clients and providers. Conducted studies and experiments showed that it is more convenient to provide and achieve these transactions as Web Services (WS) to guarantee their flexibility and their reuse. So far these services and the corresponding providers' URLs are advertised on specific UDDIs (Universal Description, Discovery and Integration). As such, after finding the requested service any given client contacts the right provider to negotiate the service access procedure. These first contacts between clients and providers are usually and commonly not protected (Encrypted) yielding enough room for Hackers to intrude into these unprotected messages.
Similar whitepapers
Service Management Resource Center
This buyer's guide provides assistance in evaluating identity and access assurance solutions. It describes common identity and access management challenges and the capabilities required to address them, and it includes checklists for assessing vendors and their products.
70 days ago by IBM Corp. DownloadTechNet Webcast: Design Considerations for Internal Public Key Infrastructures (Level 200)
More Microsoft products either require or can use security certificates than ever before. Understandably, customers want to take advantage of the increased security and features that are available if they choose to use certificates. But like any infrastructure, there are many pieces, and those pieces are relatively unchangeable once in place; so customers want to get their Public Key Infrastructure (PKI) design right the first time. The presenter will cover the various design items that should be considered when creating a robust PKI that can grow in the near-term future.
168 days ago by Microsoft DownloadData Security Mythbusters: Public Key Infrastructure (PKI)
In today's business environment, enterprises must work even harder than before to protect one of their most valuable assets - their information. When facing the pressures of regulatory oversight, email security, business-to-business requirements, and increased threats to networked environments, organizations must be proactive in protecting their data. A single loss or breach of information can have a severe impact on an enterprise's brand and public image, on customer retention, new business attraction, and the tangible bottom line. It is these factors that are driving enterprises to understand how they can address these issues, immediately, diligently, and cost effectively.
238 days ago by PKWare DownloadSub-Prime PKI: Attacking Extended Validation SSL
One of the attributes that the paper discusses is the type of SSL certificate presented by a web server when negotiating a secure connection. Modern web browsers support both Domain Validated (DV) and Extended Validation (EV) SSL certificates. EV SSL certificates were created to combat phishing and other web based spoofing attacks which succeed in spite of the DV SSL model for web site identification. The EV SSL model improves upon the DV model in two ways. First, certificate authorities enforce a more thorough off-line validation process in order to more accurately identify the agent requesting the certificate as the owner of the domain which the certificate is for.
264 days ago by Black Hat DownloadSPATE: Small-Group PKI-Less Authenticated Trust Establishment
Establishing trust between a group of individuals remains a difficult problem. Prior works assume trusted infrastructure, require an individual to trust unknown entities, or provide relatively low probabilistic guarantees of authenticity (95% for realistic settings). This work presents SPATE, a primitive that allows users to establish trust via device mobility and physical interaction. Once the SPATE protocol runs to completion, its participants' mobile devices have authentic data that their applications can use to interact securely (i.e., the probability of a successful attack is 2?24). For this work, one leverages SPATE as part of a larger system to facilitate efficient, secure, and user-friendly collaboration via email and file-sharing services.
270 days ago by Association for Computing Machinery DownloadVeriSign PKI-Based Certificates Are Rock Solid: From the Tumultuous Launch of the Integrated Cargo System to Today
Representing 250 customs brokers and freight forwarding businesses in Australia, the Customs Brokers and Forwarders Council of Australia Inc. (CBFCA) is an industry association that represents members' interests in various Australian Customs and Border Protection Service consultative forums - providing members with guidance, representation, services and access to the latest industry information. The challenge was that Australian Customs and Border Protection Service wanted a new application to protect shipment documents from unauthorized alterations during transit of the goods and the legacy system required dedicated communications lines that were becoming increasingly expensive. CBFCA deployed Gatekeeper Digital Certificates.
278 days ago by Verisign Download
