Daniel J. Polivy

Authenticating distributed data using Web services and XML signatures

As the need for digital data becomes more ubiquitous, so does the need to provide efficient mechanisms for distributing and verifying the authenticity of that data. We present an architecture for authenticating responses to queries from untrusted mirrors of authenticated dictionaries using Web Services and XML Signatures. We also describe an implementation of our scheme for the Secure Transaction Management System.

Secure Visualization of Authentication Information: A Case Study

The open nature of the Web makes it possible to create spoofed Web pages which, to the casual observer, are indistinguishable from authentic pages. The defense against Web spoofing attacks is a challenging problem since most users are unwilling (or unable) to follow complex interactive authentication procedures (e.g., inspect a Web server certificate). In this paper, we present a visual scheme that protects users against Web spoofing attacks while requiring minimal interaction