Co-author(s) :

Zakaryan Arman G.

Abstract:

In today’s online world, internet security heavily relies on the trust in Certificate Authorities. Modern browsers and operating systems provide a comprehensive list to their users, which includes all the CAs they trust by default. This could turn into a serious problem when even one of the CAs is compromised and/or goes rogue. It is especially relevant for enterprise applications, as they are more likely to be targeted for this kind of attack. In this paper, we propose a solution which can mitigate this kind of attack against large organizations. We also discuss the security of the proposed method, offering acceptable security/performance tradeoff.

Publisher:

"GITUTYUN" PUBLISHING HOUSE OF NAS RA

Date of publication:

2020-07-15

Identifier:

oai:noad.sci.am:136243

DOI:

10.51408/1963-0052

ISSN:

2579-2784

Language:

English

Journal or Publication Title:

Mathematical Problems of Computer Science

Volume:

53

URL:

Affiliation:

Institute for Informatics and Automation Problems of NAS RA ; American University of Armenia

Country:

Armenia

Year:

2020