Show simple item record

dc.contributor.authorLevin, David
dc.date.accessioned2018-02-05T15:07:24Z
dc.date.available2018-02-05T15:07:24Z
dc.date.issued2018-01-12
dc.identifier.urihttp://hdl.handle.net/1853/59326
dc.descriptionPresented on January 12, 2018 at 12:20 p.m. in the Klaus Advanced Computing Building, Room 2447.en_US
dc.descriptionDave Levin is an assistant professor in the School of Computer Science at the University of Maryland. His research empirically measures security on the Internet to understand how security breaks down, and he applies economics and cryptography to design and build new systems with provable and usable security.en_US
dc.descriptionRuntime: 40:25 minutesen_US
dc.description.abstractThe importance of the web’s public key infrastructure (PKI) cannot be overstated: it is what allows users to know with whom they are communicating online. Central to its correct operation is the ability to “revoke” certificates in the wake of a compromised key. For revocations to work: (1) website administrators must request to have their certificates revoked, (2) browser manufacturers must regularly check for revocations, and (3) above all, no one should share their private keys. Using Internet-wide measurements, I will show that all of these are violated on a regular basis, largely due to perverse economic incentives. I will also present a promising path forward: a new system, CRLite, that compactly represents all revocations in only tens of kilobytes per day. CRLite shows that, at last, it is feasible for every client to download every revocation everyday.en_US
dc.format.extent40:25 minutes
dc.language.isoen_USen_US
dc.publisherGeorgia Institute of Technologyen_US
dc.relation.ispartofseriesCybersecurity Lecture Seriesen_US
dc.subjectCertificate revocationen_US
dc.subjectCRLiteen_US
dc.titleRevocations Are Dead, Long Live Revocationsen_US
dc.typeLectureen_US
dc.typeVideoen_US
dc.contributor.corporatenameGeorgia Institute of Technology. Institute for Information Security & Privacyen_US
dc.contributor.corporatenameUniversity of Maryland. School of Computer Scienceen_US


Files in this item

This item appears in the following Collection(s)

Show simple item record