White Papers

Accelerating Application-Level Security Protocols

Category: Security

Tags: openbsd, ssl, data

Overview This paper presents a minimal extension to the BSD socket layer that can improve the performance of application-level security protocols, such as SSH or SSL/TLS, by 10%, when hardware cryptographic accelerators are available in the system. Applications specify what cryptographic transforms must be applied to incoming and outgoing data frames, and such processing is applied by the operating system itself (exploiting hardware accelerators) when the application sends or receives data. Under this scheme, user can reduce the number of system calls and context switches by 50%, and the amount of data copying by 66%. The paper describes the prototype implementation for the OpenBSD system and quantify its performance implications.

Download White Paper

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Publisher
Columbia University
File Format
PDF
Date Published
Feb 5, 2009
Format
White Papers
Topics
SSL - TLS, Security Management

Similiar White Papers

Citrix MetaFrame XP Security Standards and Deployment Scenarios

Citrix MetaFrame XP Security Standards and Deployment Scenarios

Citrix products offer the security specialist a wide range of features for securing a Citrix MetaFrame XP system. When d

Publisher: Citrix Systems  |  Tags: xp

Using Email Encryption to Enforce Security Policies for PCI, GLBA & HIPAA Compliance

Using Email Encryption to Enforce Security Policies for PCI, GLBA & HIPAA Compliance

Ensuring your organization complies with today's increasingly complex regulations and industry mandates around email and

Publisher: Proofpoint  |  Tags: data, data loss, data security, email, email security, it department, pci, webinar

Oracle Application Server 10g Security

Oracle Application Server 10g Security

Application Security includes thinking through and standardizing on authentication, authorization, integrity, confidenti

Publisher: Oracle  |  Tags: application server, applications, authentication, server

Nortel Network Case Study: Sabre

Nortel Network Case Study: Sabre

Sabre Holdings is a world leader in commercial, retail and online travel products, and providing distribution and techno

Publisher: Nortel Networks  |  Tags: applications, network, remote access, software, software development, ssl, vpn

Open, Manage and Accelerate SSL Encrypted Applications

Open, Manage and Accelerate SSL Encrypted Applications

With the webification of applications comes a need for privacy and security. SSL is a favorite encryption standard, but

Publisher: Blue Coat Systems  |  Tags: applications, ssl

Columbia University White Papers

An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol

An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol

Skype is a peer-to-peer VoIP client developed by KaZaa. Skype claims that it can work almost seamlessly across NATs and

Publisher: Columbia University  |  Tags: applications, firewall, instant messaging, ip, network, peer-to-peer, voip, yahoo im

A Budget-Balanced and Price-Adaptive Credit Protocol for MANETs

A Budget-Balanced and Price-Adaptive Credit Protocol for MANETs

A virtual credit exchange protocol for Mobile Ad-hoc NETworks (MANETs) is proposed to enforce the cooperation of packet

Publisher: Columbia University  |  Tags: data, updates

Buy-at-Bulk Network Design With Protection

Buy-at-Bulk Network Design With Protection

This paper considers approximation algorithms for buy-at-bulk network design, with the additional constraint that demand

Publisher: Columbia University  |  Tags: network

Data Mining Methods for Detection of New Malicious Executables

Data Mining Methods for Detection of New Malicious Executables

A serious security threat is malicious executables, especially new, unseen malicious executables often arriving as email

Publisher: Columbia University  |  Tags: data, email

On the Detection of Signaling DoS Attacks on 3G Wireless Networks

On the Detection of Signaling DoS Attacks on 3G Wireless Networks

Third Generation (3G) wireless networks based on the CDMA2000 and UMTS standards are now increasingly being deployed thr

Publisher: Columbia University  |  Tags: cdma2000, umts, wireless networks