Abstract
This paper presents the results of a performance evaluation of group security mechanisms achieving different qualities of protection. It is shown that there is a tradeoff between performance and quality of protection but also that scalability needs special consideration in the design of group authentication protocols.
By using the distributed graphical editor MultiGraph as a testbed, the measurements give a good indication of the feasibility of secure synchronous distributed group applications. The measurements revealed that the delays introduced by the security services are well acceptable for MultiGraph.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
S. Armstrong, A. Freier, K. Marzullo. Multicast Transport Protocol. IETF RFC 1301 (February 1990).
D.P. Barton, L.J. O’Connor. Implementing Generic Security Services in a Distributed Environment. CRC for Distributed Systems Technology, Brisbane, Australia (April 1995).
D.P. Barton, L.J. O’Connor. A Design and Implementation of Secure Multiparty Sessions. CRC for Distributed Systems Technology, Brisbane, Australia (May 1996).
C. Borman, J. Ott, H.-C. Gehrcke, T. Kerschat, N. Seifert. MTP-2: Towards Achieving the S.E.R.O. Properties for Multicast Transport. Proceedings of the Third International Conference On Computer Communications and Networks (1994).
S.E. Deering. RFC1112: Host Extensions for IP multicasting. SRI Network Information Center (August 1989).
A. Hutchison. Group Security in Distributed Systems. Inaugural-Dissertation, University of Zurich, Zurich, Switzerland (1995).
A. Hutchison. gGSS-API: a Group Enhanced Generic Security Service. Proceedings of the Thirteenth International Information Security Conference (IFIP/SEC’ 97), Copenhagen, Denmark (1997).
W. Krause. Untersuchungen von Gruppenkommunikationsmechanismen zur Entwicklung eines verteilten Graphikeditors. Diploma Thesis, Aachen University of Technology, Germany (1995).
J. Linn. Generic Security Service Application Programming Interface. IETF RFC 1508, Geer Zolot Associates (September 1993).
J. Linn. Generic Security Service Application Programming Interface, Version 2. IETF RFC 2078, OpenVision Technologies (January 1997).
NBS. Data Encryption Standard. FIPS PUB 46. National Bureau of Standards (1977).
R.L. Rivest The MD5 Message Digest Algorithm. Network Working Group RFC (April 1992).
N. Seifert. MTP-2: Multicast-Transportprotokoll Version 2. Diploma Thesis, Technical University of Berlin, Germany (1994).
M. Wallbaum Investigation And Evaluation Of A Group-Extension To The GSS-API. Diploma Thesis, Aachen University of Technology, Germany (December 1997).
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 1998 Springer-Verlag Berlin Heidelberg Berlin Heidelberg
About this paper
Cite this paper
Hutchison, A., Wallbaum, M. (1998). A Performance Comparison of Group Security Mechanisms. In: Ehrenberger, W. (eds) Computer Safety, Reliability and Security. SAFECOMP 1998. Lecture Notes in Computer Science, vol 1516. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-49646-7_8
Download citation
DOI: https://doi.org/10.1007/3-540-49646-7_8
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-65110-9
Online ISBN: 978-3-540-49646-5
eBook Packages: Springer Book Archive