Authors:
Diogo Domingues Regateiro
;
Óscar Mortágua Pereira
and
Rui L. Aguiar
Affiliation:
University of Aveiro and Instituto de Telecomunicações, Portugal
Keyword(s):
Software Architecture, Secure Communications, Information Security, Network Protocols.
Related
Ontology
Subjects/Areas/Topics:
Data and Application Security and Privacy
;
Data Engineering
;
Data Privacy and Security
;
Databases and Data Security
;
Information and Systems Security
;
WWW and Databases
Abstract:
In the business world, data is generally the most important asset of a company that must be protected. However, it must be made available to provide a wide variety of services, and so it can become the target of attacks by malicious users. Such attacks can involve eavesdropping the network or gaining unauthorized access, allowing such an attacker to access sensitive information. Secure protocols, such as Transport Layer Security (TLS), are usually used to mitigate these attacks. Unfortunately, most implementations force applications to use digital certificates, which may not always be desirable due to trust or monetary issues. Furthermore, implementations are usually closed and cannot be extended to support other authentication methods. In this article a methodology is proposed to slightly modify closed implementations of the TLS protocol that only support digital certificates, so pre-shared keys are used to protect the communication between two entities instead. A performance assess
ment is carried out on a proof-of-concept to demonstrate its feasibility and performance.
(More)