(Enter summary)
Abstract: TLS is the protocol of choice for securing today's ecommerce
and online transactions, but adding TLS to a
web server imposes a significant overhead relative to an
insecure web server on the same platform. We perform
a comprehensive study of the performance costs of TLS.
Our methodology is to profile TLS web servers with tracedriven
workloads, replacing individual components inside
TLS with no-ops, and measuring the observed increase in
server throughput. We estimate the relative costs of each... (Update)
Cited by: More
Improving Secure Server Performance by Re-balancing.. - Castelluccia.. (2005)
(Correct)
Securing a Remote Terminal Application with a Mobile.. - Oprea, Balfanz..
(Correct)
The Design of the OpenBSD Cryptographic Framework - Angelos Keromytis Columbia (2003)
(Correct)
Active bibliography (related documents): More All
0.3: Accelerating Application-Level Security Protocols - Burnside, Keromytis
(Correct)
0.2: Enhancing Web Performance - Iyengar, Nahum, Shaikh, Tewari (2002)
(Correct)
0.2: Increasing Web Server Throughput with Network Interface Data.. - Kim, Pai, Rixner (2002)
(Correct)
Similar documents based on text: More All
1.1: Transport Layer Security: How much does it really cost? - Apostolopoulos, Peris, Saha (1999)
(Correct)
0.9: Using Sesame To Secure Web Based Applications On An.. - Ashley, Vandenwauver.. (1999)
(Correct)
0.8: Inductive Analysis of the Internet Protocol TLS - Paulson (1997)
(Correct)
Related documents from co-citation: More All
4: A Study of the Relative Costs of Network Security Protocols
- Miltchev, Ioannidis et al. - 2002
4: Improving DES Coprocessor Throughput for Short Operations (context) - Lindemann, Smith - 2001
3: Security Architecture for the Internet Protocol (context) - Kent, Atkinson - 1998
BibTeX entry: (Update)
C. Coarfa, P. Druschel, and D. Wallach. Performance Analysis of TLS Web Servers. In Proceedings of NDSS '02, 2002. http://citeseer.ist.psu.edu/coarfa02performance.html More
@misc{ coarfa02performance,
author = "C. Coarfa and P. Druschel and D. Wallach",
title = "Performance Analysis of TLS Web Servers",
text = "C. Coarfa, P. Druschel, and D. Wallach. Performance Analysis of TLS Web
Servers. In Proceedings of NDSS '02, 2002.",
year = "2002",
url = "citeseer.ist.psu.edu/coarfa02performance.html" }
Citations (may not include all citations):
704
Applied Cryptography (context) - Schneier - 1996
164
Locality-aware request distribution in cluster-based network..
- Pai, Aron et al. - 1998
89
Using the SimOS machine simulator to study complex computer ..
- Rosenblum, Bugnion et al. - 1997
87
Flash: An efficient and portable Web server
- Pai, Druschel et al.
84
Network behavior of a busy Web server and its clients (context) - Mogul - 1995
60
Measuring the impact of event dispatching and concurrency mo..
- Hu, Pyrali et al. - 1997
51
Scalable kernel performance for Internet servers under reali..
- Banga, Mogul
47
A scalable and explicit event delivery mechanism for UNIX
- Banga, Mogul et al.
46
Server operating systems
- Kaashoek, Engler et al.
32
RSIM: An execution-driven simulator for ILP-based shared-mem..
- Pai, Ranganathan et al.
28
Measuring the capacity of a Web server under realistic loads
- Banga, Druschel - 1999
22
Internet Engineering Task Force (context) - Dierks, Allen et al. - 1999
13
The effects of wide-area conditions on WWW server performanc..
- Nahum, Rosu et al. - 2001
12
buffering and caching system (context) - Pai, Druschel et al. - 1999
9
Improving SSL handshake performance via batching
- Boneh, Shacham - 2001
7
IEEEACM Transaction Networking (context) - Barzilai, issues et al. - 2001
4
Secure web server performance dramatically improved by cachi..
- Goldberg, Buff et al. - 1998
3
Cryptology as a network service (context) - Dean, Berson et al. - 2001
2
Secure Blue: An architecture for a high volume SSL Internet .. (context) - Mraz - 2001
1
how much does it really cost (context) - Apostolopoulos, Peris et al. - 1999
http://www.apache.org/
http://www.OpenSSL.org/
http://www.modSSL.org/
The graph only includes citing articles where the year of publication is known.
Documents on the same site (http://www.isoc.org/isoc/conferences/ndss/02/proceedings/): More
Active Certificates: A Framework for Delegation - Borisov, Brewer (2002)
(Correct)
Experimenting with Server-Aided Signatures - Ding, Mazzocchi, Tsudik (2002)
(Correct)
Distributed Pattern Detection for Intrusion Detection - Krügel, Toth (2002)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC