Search

A key distribution scheme is used to distribute a session key for broadcasting systems(multicast communications). None of the existing key distribution schemes with the exception of the Jeong-Kwon-Lee key distribution scheme provide both security against session state reveal attacks and security against long-term key reveal attacks. Unfortunately, the Jeong-Kwon-Lee key distribution scheme suffers from three disadvantages in terms of efficiency unlike the existing schemes: (1) Unscalability for the dynamic user group, (2) Abuse of cryptographic algorithms, and (3) Inefficiency. In this paper, we propose an ID-based key distribution scheme which is secure against session state reveal attacks and long-term key reveal attacks. Also, our scheme offers the scalability, non-usage of additional cryptographic algorithms, and efficiency similar to those of the existing schemes.

In this paper, we present design and implementation of SITIS: a middleware for intrusion tolerance of internet service. SITIS is designed for scalable deployment of intrusion tolerant capability in essential internet services. SITIS has abnormal status monitoring and group management modules. The monitoring module gathers various system-information such as memory and processor usages, and group management module manage the server farm using several mechanism such as group leader selection, abnormal server isolation and joining of new server. Also, the voting mechanism is utilized in the group management to check the integrity of each member’s service. In our work, we developed the web server’s intrusion tolerance system using SITIS middleware and it is presented at the end of this paper.