A Comparison of SESAME and SSL for Intranet and Internet Security.pdfVIP

A COMPARISON OF SESAME AND SSL FOR INTRANET AND INTERNET SECURITY Paul Ashley Mark Vandenwauver Joris Claessens Information Security Research Center Katholieke Universiteit Leuven Scho ol of Data Communications Dept Elektrotechniek ESATCOSIC Queensland University of Technology Kardinaal Mercierlaan GPO Box Brisbane AUSTRALIA B Heverlee BELGIUM Tel Tel Fax Fax ashleytquteduau markvandenwauveresatkuleuvenacb e jorisclaessensesatkuleuv enacb e Abstract In recent years there has been a phenomenal increase in the use of networking Both Internet and Intranets have become a standard infrastructure to exchange information Due to their success it has become p ossible to oer servic es that were unthinkable ve years ago electronic commerce distance learning remote libraries etc Cryptogr aphic solutions are essential to pr otect computer assets and more specical ly for electronic commerce to become successful Mor eover the futur e gr owth of the Internet depends on how wel l it is or wil l be secured Two pr oposals for providing cryptogr aphic protection for networks are the SESAME se curity architecture and the SSL solution The purp ose of this paper is to compare these two solutions where they t in the TCPIP model what security servic es they pr ovide what cryptogr aphic technology is used by each solution the appli cations supported the availability and nal ly a description of their limitations The p aper nishes by introducing two schemes for the integr ation of SESAME and SSL Keywords SESAME