41 citations found. Retrieving documents...
A. Fox and S. Gribble. Security on the move: indirect authentication using kerberos. In Proceedings of the Conference on Mobile Computing and Networking (MobiCom), 1996.

 Home/Search   Document Details and Download   Summary   Related Articles   Check  

This paper is cited in the following contexts:
SPINS: Security Protocols for Sensor Networks - Perrig, Szewczyk, Wen, Culler, .. (2001)   (83 citations)  (Correct)

....9. RELATED WORK We review related work that deals with security issues in a ubiquitous computing environment. We also review work on cryptographic protocols for low end devices. Fox and Gribble present a security protocol that provides secure access to application level proxied services [10]. Their protocol is designed to interact with a proxy to Kerberos and to facilitate porting services that rely on Kerberos to wireless devices. The work of Patel and Crowcroft focuses on security solutions for mobile user devices [27] Unfortunately, their work uses asymmetric cryptography and is ....

Armando Fox and Steven D. Gribble. Security on the move: indirect authentication using kerberos. In Second annual international conference on Mobile computing and networking (MOBICOM 1996.


A Network Architecture for Heterogeneous Mobile Computing - Brewer, al. (1998)   (58 citations)  (Correct)

....both data adaptation and protocol adaptation, making it a prime example of the flexibility of the TACC toolkit for building adaptive applications. Figure 18 shows a screenshot of the TGMB client. Charon Indirect Authentication We have built a proxied version of Kerberos IV, called Charon [29], for use with resource poor clients such as PDAs and smart phones. This partitioning allows an untrusted proxy to interact with the Kerberos infrastructure on behalf of the clients, giving the clients full authenticated (and optionally encrypted) access to the services but relieving them of the ....

A. Fox and S. Gribble, "Security on the Move: Indirect Authentication Using Kerberos," Proc. MobiCom `96, Nov. 1996.


Providing Robust and Ubiquitous Security Support for.. - Luo, Kong, Zerfos.. (2001)   (Correct)

....our system immune from the unreliability of the underlying wireless transport layers [3, 29] and the routing protocols for ad hoc networks [4] Furthermore, the impacts of attacks and adversary break ins are isolated and minimized. There are several recent workes on security in wireless networks. [7] proposes a Kerberos based authentication scheme for mobile users in wireless cellular networks. 35] directly applies the threshold secret sharing and proactive secret share update techniques in a group of special nodes to increase service availability and robustness. Instead of following the ....

A. Fox and S. D. Gribble. Security on the Move: Indirect Authentication using Kerberos. In MOBICOM, pages 155--164, 1996.


Adaptive and Resilient Security for Multi-hop Multi-media Mobile.. - Kong   (Correct)

....they do not make explicit efforts to minimize communication cost. In contrast, our solution works under very weak network assumptions. We also make explicit efforts to reduce communication overhead to one or two rounds. Wireless network security research has been a relatively new research area. [26] proposes a Kerberos based solution to authentication for wireless and mobile users. 57] studies the problem of authentication in PCS. However, these solutions do not solve the problem of break ins. Besides, they do not address the scalability issue. A more recent work also applies the concept of ....

....be proactively refreshed to resist break ins, but also signing a message with a fake secret share can be detected publicly or by the service requester. Compared to the above scheme, a naive CA replicating scheme would reveal once a single site is compromised. A KDC based authentication scheme [26, 93] lacks background and experience to distribute system secrets to multiple nodes, while both service availability and intrusion tolerance must be guaranteed. We employ the distributed CA in the infrastructureless mode. The cryptographic details are presented in the Appendix. In a theater operating ....

[Article contains additional citation context not shown here]

A. Fox and S. D. Gribble. Security on the Move: Indirect Authentication using Kerberos. In MOBICOM, pages 155--164, 1996.


SPINS: Security Protocols for Sensor Networks - Perrig, Szewczyk, Tygar, Wen.. (2002)   (83 citations)  (Correct)

....environments [8] The majority of these approaches rely on asymmetric cryptography. Bergstrom et al. consider the problem of secure remote control of resource starved devices in a home [6] Fox and Gribble present a security protocol providing secure access to application level proxy services [16]. Their protocol is designed to interact with a proxy to Kerberos and to facilitate porting services relying on Kerberos to wireless devices. The work of Patel and Crowcroft focuses on security solutions for mobile user devices [39] Unfortunately, their work uses asymmetric cryptography and is, ....

A. Fox and S.D. Gribble, Security on the move: Indirect authentication using Kerberos, in: International Conference on Mobile Computing and Networking (MobiCom'96) (1996) pp. 155-164.


Securing the Rover System - Agarwal, Kamel   (Correct)

....take into consideration any security issues. Security in Rover becomes complicated due to the following factors: Wireless Medium: A wireless layer is inherently broadcast oriented. Low Power Devices: The devices have limited power, so complex security encryptions cannot be executed on them [2]. Real Time trac: The system can support real time trac, so the solutions have to be fast and ecient. Many Users: At any moment, the number of users in the system can be large, hence the security solution should be scalable. Multi Servers: The design should be extensible to support ....

Armando Fox, Steven Gribble, \Security on the Move: Indirect Authentication Using Kerberos ", Proceedings Second ACM Conf. on Mobile Computing (MobiCom96), White Plains NY, USA. 1996.


An Investigation into the use of the Tuple Space Paradigm in.. - Wade (1999)   (1 citation)  (Correct)

....typically be split into two main categories: those which modify protocols and those which modify data content. As such, proxy services can be exploited in the context of mobile computing to adapt the data communication stream requirements of applications to match the currently available service [Fox,96] Furthermore, proxies can be installed at the boundary between fixed and wireless networks so that different protocols can be used in these two domains [Badrinath,93] The Reactive Adaptive Proxy Placement (RAPP) Architecture is the subject of on going work at the University of Karlsruhe and ....

....network should be able to discern which data is of greatest value to the mobile host and prioritise the delivery of this over lower quality infrastructures. A potential solution to the above problem may be to introduce a proxy between the fixed and wireless parts of the network [Badrinath,93] Fox,96] It is possible to envisage a L2imbo proxy which acts as the connection point for one or more mobile hosts. This proxy could intelligently filter CTS and DTS protocol traffic, ensuring that only data which was known to be of use to mobile hosts was forwarded on to them. Note that this is ....

A. Fox and S. D. Gribble, "Security on the Move: Indirect Authentication using Kerberos", Proceedings of the 2nd ACM International Conference on Mobile Computing and Networking (MobiCom '96), Rye Hilton, Rye, White Plains, New York, U.S., ACM Press, 10th-12th November 1996.


Self-securing Ad Hoc Wireless Networks - Luo, Zerfos, Kong, Lu, Zhang (2002)   (12 citations)  (Correct)

....number of any nodes can collaboratively act as a server to provide certification services for other nodes. Besides, our solution typically works within one hop neighborhood and does not involve multihop wireless communication. There are several recent works on security in wireless networks. [19] proposes a Kerberos based authentication scheme for mobile users in wireless cellular networks. 20] directly applies the threshold secret sharing and proactive secret share update techniques in a fixed group of special nodes . Instead of following the client server model, we take a peer to peer ....

A. Fox and S. Gribble, "Security on the move: Indirect authentication using Kerberos," ACM MOBICOM, 1996


Adaptive Security for Multi-layer Ad-hoc Networks - Kong, Luo, Xu, Gu, Gerla, Lu (2002)   (2 citations)  (Correct)

....refreshed to resist break ins, but also signing a message with a fake secret share can be detected publicly or by the service requester. Compared to the above scheme, a naive CAreplicating scheme would reveal once a single site is compromised. A KDC based authentication scheme [6, 42] lacks background and experience to distribute system secrets to multiple nodes, while both service availability and intrusion tolerance must be guaranteed. We employ the distributed CA in the infrastructureless mode. The cryptographic details are presented in the Appendix. In a theater operating ....

....services are provided by Kerberos [42] PGP [31] and X.509 Directory Authentication Service [18] In these proposals, services are typically achieved via a centralized CA. Challenges from service availability, node mobility, and network scalability are not fully responded. For example, Charon [6] is an implementation of authentication services based on Kerberos. It addresses the device heterogeneity in wireless networks by deploying an infrastructure with base stations and placing the complexity into the infrastructure. Though mobile clients, especially those running low end devices, can ....

A. Fox and S. D. Gribble. Security on the Move: Indirect Authentication using Kerberos. In MOBICOM, pages 155--164, 1996.


Adaptive Security for Multi-layer Ad-hoc Networks - Haiyun (2002)   (2 citations)  (Correct)

....refreshed to resist break ins, but also signing a message with a fake secret share can be detected publicly or by the service requester. Compared to the above scheme, a naive CAreplicating scheme would reveal SK 0 ff once a single site is compromised. A KDC based authentication scheme [6, 41] lacks background and experience to distribute system secrets to multiple nodes, while both service availability and intrusion tolerance must be guaranteed. We employ the distributed CA in the infrastructureless mode. The cryptographic details are presented in the Appendix. In a theater operating ....

....services are provided by Kerberos [41] PGP [30] and X.509 Directory Authentication Service [17] In these proposals, services are typically achieved via a centralized CA. Challenges from service availability, node mobility, and network scalability are not fully responded. For example, Charon [6] is an implementation of authentication services based on Kerberos. It addresses the device heterogeneity in wireless networks by deploying an infrastructure with base stations and placing the complexity into the infrastructure. Though mobile clients, especially those running low end devices, can ....

A. Fox and S. D. Gribble. Security on the Move: Indirect Authentication using Kerberos. In MOBICOM, pages 155--164, 1996.


A Security Architecture for Application Session Handoff - Skow, Kong, Phan, Cheng, .. (2002)   (Correct)

....to provide transcoding for multiple WWW clients. Finally, Application Data Services [9] allows users to transfer data from non traditional network appliances, such as digital cameras, through a network infrastructure. Security in the context of middleware based networking is relatively new. Charon [8] uses Kerberos [20] to provide authentication service to the network, and addresses device heterogeneity by exploiting the computation power available in the middleware. However, Kerberos is essentially an approach based on a centralised key distribution center (KDC) Every authentication request ....

A. Fox and S. Gribble. "Security on the Move: Indirect Authentication Using Kerberos," In Proceedings of the


Active Certificates: A Framework for Delegation - Borisov, Brewer (2002)   (1 citation)  (Correct)

....and have a less general area of application than PolicyMaker, but it would combine a number of their strengths. Proxy based solutions can be used to implement general delegation policies with complete transparency. Several projects have used proxy technology to perform security adaptation [32, 12]. However, maintaining an online proxy imposes significant computational, connectivity, and management overhead on its owner. In addition, prevalence of such proxies might put excessive bandwidth requirements on the infrastructure because of the resulting inefficient routes. Most importantly, the ....

A. Fox and S.D. Gribble. Security on the move: Indirect authentication using Kerberos. In 2nd ACM International Conference on Mobile Computing and Networking, November 1996.


The Performance of Public Key-Enabled Kerberos.. - Harbitter, Menasce (2001)   (1 citation)  (Correct)

....requires prior specific permission and or a fee. CCS01, November 5 8, 2001, Philadelphia, Pennsylvania, USA. Copyright 2001 ACM 1 58113 385 5 01 00011 5.00. 2. BACKGROUND ON MOBILE AUTHENTICATION APPLICATIONS AND THE USE OF PROXY SERVERS Proxy servers have been widely studied and utilized [2, 3] in mobile computing architectures. The following paragraphs review two relevant examples that apply proxies to mobile authentication: Charon [3] and the Wireless Application Protocol (WAP) Wireless Transport Level Security (WTLS) 4] 2.1 Charon The Charon protocol adapts standard Kerberos ....

....2. BACKGROUND ON MOBILE AUTHENTICATION APPLICATIONS AND THE USE OF PROXY SERVERS Proxy servers have been widely studied and utilized [2, 3] in mobile computing architectures. The following paragraphs review two relevant examples that apply proxies to mobile authentication: Charon [3] and the Wireless Application Protocol (WAP) Wireless Transport Level Security (WTLS) 4] 2.1 Charon The Charon protocol adapts standard Kerberos authentication to a mobile PDA platform. Kerberos is a well known network authentication protocol. It uses secret key cryptography and relies on a ....

[Article contains additional citation context not shown here]

Fox, A. and S.D. Gribble. Security on the Move: Indirect Authentication Using Kerberos. in MOBICOM 96. 1996. Rye, New York.


iMobile: A Proxy-Based Platform for Mobile Services - Rao, Chang (2001)   (6 citations)  (Correct)

....mechanisms. Currently, we use the cell phone id on wireless phone networks, AOL buddy names on the AIM network, and generic user id and password for WAP, HTPP, and telnet clients. However, iMobile itself does not have control over how secure these networks are. Solutions such as Charon [6] and the SSH Secure Shell should be introduced to provide end to end authentication services. Charon is interesting as it focuses on how to secure the connection between the client and an application level proxy. The Charon approach allows the client module to be extremely lightweight and amenable ....

Fox, Armando. and Gribble, Steven. Security on the Move: Indirect Authentication using Kerberos, in Proc. Second ACM Conf. on Mobile Computing (MobiCom 96), White Plains, New York, Nov. 1996.


Ubiquitous and Robust Authentication Services for Ad Hoc Wireless .. - Luo, Lu (2000)   (1 citation)  (Correct)

....wireless transport layers and the routing protocols for ad hoc networks. Furthermore, the impacts of DoS attacks and adversary break ins are minimized and isolated. Achilles Heel is completely eliminated from the system. There are several recent researches on security in wireless networks. [18] proposes a Kerberosbased solution to authentication for mobile users in wireless cellular networks. 23] studies the problem of authentication in PCS. 34] directly applies the threshold secret sharing and proactive secret share updates mechanisms in a group of special nodes or servers in the ....

A. Fox and S. Gribble, "Security on the move: Indirect authentication using Kerberos," ACM MOBICOM, 1996.


SPINS: Security Protocols for Sensor Networks - Perrig, Szewczyk, Wen, Culler, .. (2001)   (83 citations)  (Correct)

....9. RELATED WORK We review related work that deals with security issues in a ubiquitous computing environment. We also review work on cryptographic protocols for low end devices. Fox and Gribble present a security protocol that provides secure access to application level proxy services [10]. Their protocol is designed to interact with a proxy to Kerberos and to facilitate porting services that rely on Kerberos to wireless devices. The work of Patel and Crowcroft focuses on security solutions for mobile user devices [27] Unfortunately, their work uses asymmetric cryptography and is ....

Armando Fox and Steven D. Gribble. Security on the move: indirect authentication using Kerberos. In Second Annual International Conference on Mobile Computing and Networking (MOBICOM 1996), pages 155--164, White Plains, NY USA, November 1996.


A Study on Mobile Language Systems - Sekiguchi (1999)   (1 citation)  (Correct)

....who are familiar with wireless and wired network, and communication protocols, mobility often implies physical mobility, the mobility in the real world. The application domain of physical mobility includes PDA (personal digital assistants) using GPS [66] support for laptop and notebook computers [38, 53, 54, 57], and reduction in energy consumption [50, 67] On the other hand, for those who familiar with operating system and programming languages, mobility often implies software mobility. This is the reason why Luca Cardelli proposed that the former form of 13 14 CHAPTER 1. INTRODUCTION mobility should ....

Armando Fox and Steven D. Gribble. Security on the Move: Indirect Authentication Using Kerberos. In MOBICOM'96 Proceedings of The Second Annual International Conference on Mobile Computing and Networking, pages 155-- 164, 1996.


Composable Ad-hoc Mobile Services for Universal Interaction - Todd Hodes (1997)   (39 citations)  (Correct)

....We are still trying to quantitatively determine which data, if any, is best dedicated to these bits for optimizing reasonable client driven workloads. 3. 5 Security Making services available to visitors brings up a host of general security issues, including those specific to the wireless domain [7, 11, 4]. In addition to standard cryptography based security with passwords, capabilities (e.g. Kerberos) and public key encryption, service interaction systems specifically require additional access control. This is due to our extension of devices to make them network addressable entities. In general, ....

FOX, A., AND GRIBBLE, S. D. Security on the Move: Indirect Authentication using Kerberos. Proceedings of the 2nd ACM International Conferenceon Mobile Computing and Networking (1996), 10--12.


Composable Ad hoc Location-based Services for Heterogeneous.. - Hodes, Katz (1998)   (14 citations)  (Correct)

....trying to quantitatively determine which data, if any, is best dedicated to these bits for optimizing reasonable client driven workloads. 3. 6 Scoped Access Control Making services available to visitors brings up ahost of general security issues, including those specific to the wireless domain [9, 16, 5]. In addition to the need for standard cryptography based security at the granularity of administrative domains, service interaction systems require localized access control: the expectation that environmental changes can only be affected by people in that environment (e.g. lights cannot be ....

FOX, A., AND GRIBBLE, S. D. Security on the Move: Indirect Authentication using Kerberos. Proceedings of the 2nd ACM International Conferenceon Mobile Computing and Networking (1996), 10--12.


Composable Ad hoc Location-based Services for Heterogeneous.. - Todd Hodes (1998)   (14 citations)  (Correct)

....trying to quantitatively determine which data, if any, is best dedicated to these bits for optimizing reasonable client driven workloads. 3. 6 Scoped Access Control Making services available to visitors brings up ahost of general security issues, including those specific to the wireless domain [7, 13, 4]. In addition to standard cryptography basedsecurity with passwords, capabilities (e.g. Kerberos) and public key encryption, service interaction systems specifically require additional access control. This is due to our extending devices to be network addressable entities. In general, global ....

FOX, A., AND GRIBBLE, S. D. Security on the Move: Indirect Authentication using Kerberos. Proceedings of the 2nd ACM International Conferenceon Mobile Computing and Networking (1996), 10--12.


The Ninja Architecture for Robust Internet-Scale.. - Gribble, Welsh.. (2000)   (96 citations)  Self-citation (Gribble)   (Correct)

....protocols such as Java RMI, Ninja RPC, and Jini assume that clients are well connected and computationally powerful. Similarly, active proxies can be used to help establish connections between clients and services by performing more complicated tasks associated with cryptographic handshakes [16]. Additionally, active proxies can distill service content into a format more suitable for small devices [17] Content pre sentation can be tailored for small screen layouts, and image resolution and bit depth reduced both for limited display and network capabilities of these devices [15, 17] ....

Armando Fox and Steven D. Gribble. Security On the Move: Indirect Authentication Using Kerberos. In Proc. Second International Conference on Wireless Networking and Mobile Computing (MobiCom '96), Rye, NY, November 1996.


The Ninja Architecture for Robust Internet-Scale.. - Gribble, Welsh.. (2000)   (96 citations)  Self-citation (Gribble)   (Correct)

....protocols such as Java RMI, Ninja RPC, and Jini assume that clients are well connected and computationally powerful. Similarly, active proxies can be used to help establish connections between clients and services by performing more complicated tasks associated with cryptographic handshakes [16]. Additionally, active proxies can distill service content into a format more suitable for small devices [17] Content presentation can be tailored for small screen layouts, and image resolution and bit depth reduced both for limited display and network capabilities of these devices [15, 17] For ....

Armando Fox and Steven D. Gribble. Security On the Move: Indirect Authentication Using Kerberos. In Proc. Second International Conference on Wireless Networking and Mobile Computing (MobiCom '96), Rye, NY, November 1996.


A Network Architecture for Heterogeneous Mobile Computing - Brewer, Amir.. (1998)   (58 citations)  Self-citation (Gribble)   (Correct)

....both data adaptation and protocol adaptation, making it a prime example of the flexibility of the TACC toolkit for building adaptive applications. Figure 18 shows a screenshot of the TGMB client. Charon Indirect Authentication: We have built a proxied version of Kerberos IV [SNS88] called Charon [FG96], for use with resource poor clients such as PDAs and smart phones. This partitioning allows an untrusted proxy to interact with the Kerberos infrastructure on behalf of the clients, giving the clients full authenticated (and optionally encrypted) access to the services but relieving them of the ....

....not only provide compelling services, but also show that the proxy architecture really can enable both powerful new services and a very heterogeneous mobile and wireless infrastructure. For more info: transformation [FGBA96] video transcoding [AMZ95] cluster based services [FGCB97] Charon [FG96]; TACC applications [UCB97] network monitoring and SPAND [SSK97] 5 Adaptive Network Services The Network Services component of the architecture builds on our innovations in routing, transport, and the proxy architecture. It provides support for locale specific discovery of available resources ....

A. Fox and S. Gribble. Security on the Move: Indirect Authentication Using Kerberos, Proceedings of MobiCom '96, November 1996.


A Network Architecture for Heterogeneous Mobile Computing - Brewer, Katz, Amir.. (1998)   (58 citations)  Self-citation (Fox Gribble)   (Correct)

....both data adaptation and protocol adaptation, making it a prime example of the flexibility of the TACC toolkit for building adaptive applications. Figure 18 shows a screenshot of the TGMB client. Charon Indirect Authentication: We have built a proxied version of Kerberos IV, called Charon [FG96], for use with resource poor clients such as PDAs and smart phones. This partitioning allows an untrusted proxy to interact with the Kerberos infrastructure on behalf of the clients, giving the clients full authenticated (and optionally encrypted) access to the services but relieving them of the ....

A. Fox and S. Gribble. Security on the Move: Indirect Authentication Using Kerberos, Proceedings of MobiCom '96, November 1996.


Adapting to Network and Client Variation Using Infrastructural.. - Armando Fox (1998)   (114 citations)  Self-citation (Fox Gribble)   (Correct)

....on the client. Top Gun Mediaboard is in prealpha use at UC Berkeley, and performs satisfactorily even over slow links such as the Metricom Ricochet wireless packet radio modem [31] 4. 4 Charon: Indirect Authentication for Thin Clients Although not yet rewritten as a TACC application, Charon [21] illustrates a similar use of adaptation by proxy, for performing indirect authentication. In particular, Charon mediates between thin clients and a Kerberos [38] infrastructure. Charon is necessary because, as we describe in [21] the computing resources required for a direct port of Kerberos to ....

....Clients Although not yet rewritten as a TACC application, Charon [21] illustrates a similar use of adaptation by proxy, for performing indirect authentication. In particular, Charon mediates between thin clients and a Kerberos [38] infrastructure. Charon is necessary because, as we describe in [21], the computing resources required for a direct port of Kerberos to thin clients are forbidding. With Charon, Kerberos can be used both to authenticate clients to the proxy service, and to authenticate the proxied clients to Kerberized servers. Charon relieves the client of a significant amount of ....

Armando Fox and Steven D. Gribble. Security On the Move: Indirect Authentication Using Kerberos. In Proc. Second International Conference on Wireless Networking and Mobile Computing (MobiCom '96), Rye, NY, November 1996.


A Framework For Separating Server Scalability and Availability From .. - Fox (1998)   (7 citations)  Self-citation (Fox)   (Correct)

....a good fit for TACC, the orthogonal state management provided by SRM reinforces the validity of judicious separation of concerns as a tool for making application development more tractable. 4 Charon: Indirect Authentication for Thin Clients Although not yet rewritten as a TACC application, Charon [55] illustrates a similar use of adaptation by proxy, for performing indirect authentication. In particular, Charon mediates between thin clients and a Kerberos [127] infrastructure. Charon is necessary because, as we describe in [55] the computing resources required for a direct port of Kerberos to ....

....Clients Although not yet rewritten as a TACC application, Charon [55] illustrates a similar use of adaptation by proxy, for performing indirect authentication. In particular, Charon mediates between thin clients and a Kerberos [127] infrastructure. Charon is necessary because, as we describe in [55], the computing resources required for a direct port of Kerberos to thin clients are forbidding. With Charon, Kerberos can be used both to authenticate clients to the proxy service, and to authenticate the proxied clients to Kerberized servers. Charon relieves the client of a significant amount of ....

Armando Fox and Steven D. Gribble. Security On the Move: Indirect Authentication Using Kerberos. In First ACM Conference on Mobile Computing and Networking (MOBICOM 96), Rye, NY, November 1996.


Adapting to Network and Client Variation Using Active .. - Fox, Gribble.. (1998)   (114 citations)  Self-citation (Fox Gribble)   (Correct)

....on the client. Top Gun Mediaboard is in prealpha use at UC Berkeley, and performs satisfactorily even over slow links such as the Metricom Ricochet wireless packet radio modem [11] 4. 4 Charon: Indirect Authentication for Thin Clients Although not yet rewritten as a TACC application, Charon [23] illustrates a similar use of adaptation by proxy, for performing indirect authentication. In particular, Charon mediates between thin clients and a Kerberos [38] infrastructure. Charon is necessary because, as we describe in [23] the computing resources required for a direct port of Kerberos to ....

....Clients Although not yet rewritten as a TACC application, Charon [23] illustrates a similar use of adaptation by proxy, for performing indirect authentication. In particular, Charon mediates between thin clients and a Kerberos [38] infrastructure. Charon is necessary because, as we describe in [23], the computing resources required for a direct port of Kerberos to thin clients are forbidding. With Charon, Kerberos can be used both to authenticate clients to the proxy service, and to authenticate the proxied clients to Kerberized servers. Charon relieves the client of a significant amount of ....

Armando Fox and Steven D. Gribble. Security on the move: Indirect authentication using Kerberos. In Proc. Second International Conference on Wireless Networking and Mobile Computing (MobiCom '96), Rye, NY, November 1996.


Experience With Top Gun Wingman: A Proxy-Based.. - Fox, Goldberg.. (1998)   (37 citations)  Self-citation (Fox Gribble)   (Correct)

....applications, in which proxy agents placed between clients and servers perform computation and storage intensive tasks, such as datatype specific lossy compression, on behalf of clients. Properly applied, this approach reduces the bandwidth demands on the infrastructure through lossy compression (Fox Brewer 1996, Fox, Gribble, Chawathe, Brewer Gauthier 1997) and allows legacy and other nonstandard (including thin) clients to interoperate with existing servers. Furthermore, by performing client adaptation at a shared infrastructural proxy, we avoid inserting adaptation machinery at each origin server. ....

....Even for images that have no link to follow, we chose to have the popup menu appear anyway (with the follow link item disabled) to avoid disorienting the user with different click behaviors for different image types. We originally proposed a mechanism of this kind for regular Web surfing in (Fox Brewer 1996), but Wingman completely integrates the refinement interface into the user experience. 2.5 Noteworthy Implementation Details Following the long standing recommendations of (Clark Tennenhouse 1990) complete, ready to render pages are delivered as application data units (ADU s) This simplifies ....

[Article contains additional citation context not shown here]

Fox, A. & Gribble, S. D. (1996), Security On the Move: Indirect Authentication Using Kerberos, in `Proc. Second International Conference on Wireless Networking and Mobile Computing (MobiCom '96)', Rye, NY.


Adapting to Network and Client Variability via On-Demand Dynamic.. - Fox (1996)   (150 citations)  Self-citation (Fox Gribble)   (Correct)

....of distillation can be off loaded to other nodes in a network of workstations [3] We are actively investigating how to do load balancing for such a system. GloMop also provides authentication and secure channels using Charon, a lightweight indirect authentication protocol based on Kerberos IV. In [15] we show that Charon requires little trust to be surrendered to the proxy and is amenable to implementation even on very small PDA class devices. 1: From Global Mobile Computing By Proxy. Figure 9: Image distillation latency versus the number of simultaneous users on one proxy. uuuuu uuuu uu uu ....

A. Fox and S. Gribble. Security on the Move: Indirect Authentication Using Kerberos. To appear, Proceedings of the ACM MobiCom 96 Conference, White Plains, NY, November 1996.


LIGER: Implementing Efficient Hybrid Security.. - Traynor, Kumar.. (2006)   (Correct)

No context found.

A. Fox and S. Gribble. Security on the move: indirect authentication using kerberos. In Proceedings of the Conference on Mobile Computing and Networking (MobiCom), 1996.


Adaptive Security For Multilevel Ad Hoc Networks - Kong, Luo, Xu, al. (2002)   (3 citations)  (Correct)

No context found.

Fox A, Gribble SD. Security on the move: indirect authentication using kerberos. In MOBICOM, 1996; pp. 155 -- 164.


A Directory Infrastructure to Support Mobile Services - Khalid (2001)   (2 citations)  (Correct)

No context found.

Armando Fox and Steven D. Gribble. Security on the Move: Indirect Authentication Using Kerberos. In MOBICOM'96 Proceedings of the Second Annual International Conference on Mobile Computing and Networking, pages 155--164, 1996.


Active Certificates: A Framework for Delegation - Borisov (2002)   (1 citation)  (Correct)

No context found.

A. Fox and S.D. Gribble. Security on the move: Indirect authentication using Kerberos. In 2nd ACM International Conference on Mobile Computing and Networking, November 1996.


Location-aware Access Control for Pervasive Computing Environments - Michalakis (2003)   (Correct)

No context found.

Armando Fox and Steven D. Gribble. Security on the move: Indirect authentication using kerberos. In Mobile Computing and Networking, pages 155-164, 1996.


Self-securing Ad Hoc Wireless Networks - Luo, Zerfos, Kong, Lu, Zhang (2002)   (12 citations)  (Correct)

No context found.

A. Fox and S. Gribble, "Security on the move: Indirect authentication using Kerberos," ACM MOBICOM, 1996


Proxy-based Task Partitioning of Watermarking.. - Kejariwal, Gupta, .. (2004)   (Correct)

No context found.

A. Fox and S. D. Gribble. Security on the move: Indirect authentication using kerberos. In Mobile Computing and Networking, pages 155--164, White Plains, NY, Nov 1996.


Proxy-based Task Partitioning of Watermarking.. - Kejariwal, Gupta, ..   (Correct)

No context found.

A. Fox and S. D. Gribble. Security on the move: Indirect authentication using kerberos. In Mobile Computing and Networking, pages 155--164, White Plains, NY, Nov 1996.


A Directory Infrastructure to Support Mobile Services - Khalid (2001)   (2 citations)  (Correct)

No context found.

Armando Fox and Steven D. Gribble. Security on the Move: Indirect Authentication Using Kerberos. In MOBICOM'96 Proceedings of the Second Annual International Conference on Mobile Computing and Networking, pages 155--164, 1996.


Energy Analysis of Multimedia Watermarking on.. - Kejariwal, Gupta, .. (2003)   (Correct)

No context found.

A. Fox and S. D. Gribble. Security on the move: Indirect authentication using kerberos. In Mobile Computing and Networking, pages 155--164, White Plains, NY, Nov 1996.


Proposal: ProActive Infrastructure - Brewer, al. (1998)   (Correct)

No context found.

A. Fox and S. Gribble. "Security on the Move: Indirect Authentication Using Kerberos", Proceedings of MobiCom '96, Nov 1996.


Authentication and Security in WebFS - Belani, Thornton, Zhou (1997)   (5 citations)  (Correct)

No context found.

A.Fox and S.Gribble, "Security on the Move: Indirect Authentication Using Kerberos," Proceedings of the 2nd ACM International Conference on Mobile Computing and Networking (MobiCom '96), Rye, New York, November 10-12, 1996.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC