The Experts below are selected from a list of 27 Experts worldwide ranked by ideXlab platform

Andrew Basden - One of the best experts on this subject based on the ideXlab platform.

  • Refereed Papers: Evaluating Trust in a Public Key Certification Authority
    Computers & Security, 2001
    Co-Authors: David W. Chadwick, Andrew Basden
    Abstract:

    With the growth of many different public key infrastructures on the Internet, relying parties have the difficult task of deciding whether the sender of Digitally Signed Message is really who the public key certificate says they are. We have built an expert system that calculates the amount of trust, or trust quotient, that one can place in the name to public key binding in a certificate. The structure of the expert system is based on the CPS framework of Chokhani and Ford (RFC 2527), whilst the relative importance of the various factors that comprise the trust quotient, were determined by interviewing PKI experts from around the globe. This paper discusses the knowledge analysis strategy employed to collect this expert information and how we used it to develop the KBS. The analysis of the results of the interviews are also presented, and they can be summarised succinctly as ''there are some factors concerning trust in a PKI which nearly all experts agree upon, and there are other factors in which there is very little agreement at all''. The importance of identifying contextual factors when building a knowledge base is very important. In many cases, a disagreement between experts, as shown by a bimodal split in importance, was traced to differences in context and we show how this can be a source of new knowledge.

Qiongxiao Wang - One of the best experts on this subject based on the ideXlab platform.

  • ACNS Workshops - On the Verification of Signed Messages
    Lecture Notes in Computer Science, 2020
    Co-Authors: Quanwei Cai, Wei Wang, Qiongxiao Wang
    Abstract:

    Signed Messages are widely used in network security. A Message is typically Signed by the sender with semantically-secure signature algorithms, and then verified by any receiver which is configured with the sender’s public key. A successfully-verified Message ensures data origin authentication and data integrity. However, some known vulnerabilities or incidents indicate that this mechanism does not always take effect in the real-world systems; that is, even when the sender’s private key is well protected, a Message forged or modified by attackers, might still be successfully verified by receivers. This paper analyzes the implementations of Digitally-Signed Message verification, and discusses possible weaknesses based on some publicly-disclosed vulnerabilities. This survey provides a guideline for the secure implementation of cryptographic protocols.

David W. Chadwick - One of the best experts on this subject based on the ideXlab platform.

  • Refereed Papers: Evaluating Trust in a Public Key Certification Authority
    Computers & Security, 2001
    Co-Authors: David W. Chadwick, Andrew Basden
    Abstract:

    With the growth of many different public key infrastructures on the Internet, relying parties have the difficult task of deciding whether the sender of Digitally Signed Message is really who the public key certificate says they are. We have built an expert system that calculates the amount of trust, or trust quotient, that one can place in the name to public key binding in a certificate. The structure of the expert system is based on the CPS framework of Chokhani and Ford (RFC 2527), whilst the relative importance of the various factors that comprise the trust quotient, were determined by interviewing PKI experts from around the globe. This paper discusses the knowledge analysis strategy employed to collect this expert information and how we used it to develop the KBS. The analysis of the results of the interviews are also presented, and they can be summarised succinctly as ''there are some factors concerning trust in a PKI which nearly all experts agree upon, and there are other factors in which there is very little agreement at all''. The importance of identifying contextual factors when building a knowledge base is very important. In many cases, a disagreement between experts, as shown by a bimodal split in importance, was traced to differences in context and we show how this can be a source of new knowledge.

Quanwei Cai - One of the best experts on this subject based on the ideXlab platform.

  • ACNS Workshops - On the Verification of Signed Messages
    Lecture Notes in Computer Science, 2020
    Co-Authors: Quanwei Cai, Wei Wang, Qiongxiao Wang
    Abstract:

    Signed Messages are widely used in network security. A Message is typically Signed by the sender with semantically-secure signature algorithms, and then verified by any receiver which is configured with the sender’s public key. A successfully-verified Message ensures data origin authentication and data integrity. However, some known vulnerabilities or incidents indicate that this mechanism does not always take effect in the real-world systems; that is, even when the sender’s private key is well protected, a Message forged or modified by attackers, might still be successfully verified by receivers. This paper analyzes the implementations of Digitally-Signed Message verification, and discusses possible weaknesses based on some publicly-disclosed vulnerabilities. This survey provides a guideline for the secure implementation of cryptographic protocols.

Wei Wang - One of the best experts on this subject based on the ideXlab platform.

  • ACNS Workshops - On the Verification of Signed Messages
    Lecture Notes in Computer Science, 2020
    Co-Authors: Quanwei Cai, Wei Wang, Qiongxiao Wang
    Abstract:

    Signed Messages are widely used in network security. A Message is typically Signed by the sender with semantically-secure signature algorithms, and then verified by any receiver which is configured with the sender’s public key. A successfully-verified Message ensures data origin authentication and data integrity. However, some known vulnerabilities or incidents indicate that this mechanism does not always take effect in the real-world systems; that is, even when the sender’s private key is well protected, a Message forged or modified by attackers, might still be successfully verified by receivers. This paper analyzes the implementations of Digitally-Signed Message verification, and discusses possible weaknesses based on some publicly-disclosed vulnerabilities. This survey provides a guideline for the secure implementation of cryptographic protocols.