Details

Autor(en) / Beteiligte

• Boyer, Jodie
• Hasan, Ragib
• Olson, Lars
• Borisov, Nikita
• Gunter, Carl
• Raila, David

Titel

Improving multi-tier security using redundant authentication

Ist Teil von

• Conference on Computer and Communications Security: Proceedings of the 2007 ACM workshop on Computer security architecture; 02-02 Nov. 2007, 2007, p.54-62

Ort / Verlag

ACM

Erscheinungsjahr

2007

Link zum Volltext

Quelle

ACM

Beschreibungen/Notizen

• Multi-tier web server systems are used in many important contexts and their security is a major cause of concern. Such systems can exploit strategies like least privilege to make lower tiers more secure in the presence of compromised higher tiers. In this paper, we investigate an extension of this technique in which higher tiers are required to provide evidence of the authentication of principals when they make requests of lower tiers. This concept, which we call redundant authentication , enables lower tiers to provide security guarantees that improve significantly over current least privilege strategies. We validate this technique by applying it to a practical Building Automation System (BAS) application, where we explore the use of redundant authentication in conjunction with an authentication proxy to enable interoperation with existing enterprise authentication services.