Laribus: Privacy-Preserving Detection of Fake SSL Certificates with a Social P2P Notary Network

Micheloni, Andrea; Fuchs, Karl-Peter; Herrmann, Dominik; Federrath, Hannes

doi:10.1109/ares.2013.7

Cited by 7 publications

(2 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A distributed storage mechanism offers resilience to client churn and increased performance via caching. This paper extends our previously published work in [13], providing a more comprehensive survey of related efforts that aim to improve the security of certificate validation as well as a more detailed description of the privacy-preserving mechanisms of Laribus.…”

Section: Introductionmentioning

confidence: 75%

Laribus: privacy-preserving detection of fake SSL certificates with a social P2P notary network

Fuchs

Herrmann

Micheloni

et al. 2015

EURASIP J. on Info. Security

Self Cite

View full text Add to dashboard Cite

In this paper we present Laribus, a peer-to-peer network designed to detect local man-in-the-middle attacks against secure socket layer/transport layer security (SSL/TLS). With Laribus, clients can validate the authenticity of a certificate presented to them by retrieving it from different vantage points on the network. Unlike previous solutions, clients do not have to trust a central notary service nor do they have to rely on the cooperation of website owners. The Laribus network is based on a social network graph, which allows users to form notary groups that improve both privacy and availability. It integrates several well-known techniques, such as secret sharing, ring signatures, layered encryption, range queries, and a distributed hash table (DHT), to achieve privacy-aware queries, scalability, and decentralization. We present the design and core components of Laribus, discuss its security properties, and also provide results from a simulation-based feasibility study.

show abstract

Section: Introductionmentioning

confidence: 75%

Laribus: privacy-preserving detection of fake SSL certificates with a social P2P notary network

Fuchs

Herrmann

Micheloni

et al. 2015

EURASIP J. on Info. Security

Self Cite

View full text Add to dashboard Cite

show abstract

“…Taking applications for using notary servers in a new direction, some researchers used notary server concept in providing users with the ability to model trust relationships that reflect their social relationships. Micheloni et al [13] presented Laribus, a social based network, which allows users to trust their friends, and not unknown organizations, with certificate validation. Huang et al [14] used notary server for detecting SSL MitM attacks against a Facebook's users.…”

Section: Related Workmentioning

confidence: 99%

The Efficient Use of a List of Trusted Certificate Authorities

Alnatsheh

2018

IJETS

View full text Add to dashboard Cite

Nowadays, many Certificate Authorities (CAs) that issue certificates may or may not be trusted because not all CAs are reliable and trustworthy. University laboratories and computers of its people (students, lecturer and staff) are thus susceptible to the risk resulting from this mistrust. This study proposes a university owned notary server, which will be managed by the university, to solve the problem using a Certificate Trust List (CTL). Simply put, when students and others use the Web, the notary server checks the certificate to see whether a conflict exists and verifies the signatures and key references in the certificate. If all the information is correct, the notary server sends a response of approval to the client to accept the certificate. Our system enhanced the security in a university by trusting only genuine CAs. Our proposed server is better than regular notary servers because it uses existing infrastructure and online connections, and it does not introduce any overheads or special configurations to the client’s Web browser. Compared with a well known notary server runs over the existing infrastructure, our proposed notary server is 10.8 seconds faster in terms of dealing with untrusted CA and 2.3 seconds faster in terms of dealing with mismatched address of the Web sites.

show abstract

Algorithmic Aspects of Distributed Hash Tables on Cloud, Fog, and Edge Computing Applications: A Survey

Karras,

Schizas

et al. 2023

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Laribus: Privacy-Preserving Detection of Fake SSL Certificates with a Social P2P Notary Network

Cited by 7 publications

References 30 publications

Laribus: privacy-preserving detection of fake SSL certificates with a social P2P notary network

Laribus: privacy-preserving detection of fake SSL certificates with a social P2P notary network

The Efficient Use of a List of Trusted Certificate Authorities

Algorithmic Aspects of Distributed Hash Tables on Cloud, Fog, and Edge Computing Applications: A Survey

Contact Info

Product

Resources

About