Validating security protocols with cloud-based middleboxes

Curtis R. Taylor; Craig A. Shue

doi:10.1109/CNS.2016.7860493

Validating security protocols with cloud-based middleboxes

Curtis R. Taylor, Craig A. Shue

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

7 Scopus citations

Abstract

Residential networks pose a unique challenge for security since they are operated by end-users that may not have security expertise. Residential networks are also home to devices that may have lackluster security protections, such as Internet of Things (IoT) devices, which may introduce vulnerabilities. In this work, we introduce TLSDeputy, a middlebox-based system to protect residential networks from connections to inauthentic TLS servers. By combining the approach with OpenFlow, a popular software-defined networking protocol, we show that we can effectively provide residential network-wide protections across diverse devices with minimal performance overheads.

Original language	English
Title of host publication	2016 IEEE Conference on Communications and Network Security, CNS 2016
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	261-269
Number of pages	9
ISBN (Electronic)	9781509030651
DOIs	https://doi.org/10.1109/CNS.2016.7860493
State	Published - Feb 21 2017
Externally published	Yes
Event	2016 IEEE Conference on Communications and Network Security, CNS 2016 - Philadelphia, United States Duration: Oct 17 2016 → Oct 19 2016

Publication series

Name	2016 IEEE Conference on Communications and Network Security, CNS 2016

Conference

Conference	2016 IEEE Conference on Communications and Network Security, CNS 2016
Country/Territory	United States
City	Philadelphia
Period	10/17/16 → 10/19/16

Funding

Funders	Funder number
National Science Foundation	1422180

Access to Document

10.1109/CNS.2016.7860493

Cite this

Taylor, C. R., & Shue, C. A. (2017). Validating security protocols with cloud-based middleboxes. In 2016 IEEE Conference on Communications and Network Security, CNS 2016 (pp. 261-269). Article 7860493 (2016 IEEE Conference on Communications and Network Security, CNS 2016). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/CNS.2016.7860493

@inproceedings{b4b96498faf34a85a09cf85ee3b44227,

title = "Validating security protocols with cloud-based middleboxes",

abstract = "Residential networks pose a unique challenge for security since they are operated by end-users that may not have security expertise. Residential networks are also home to devices that may have lackluster security protections, such as Internet of Things (IoT) devices, which may introduce vulnerabilities. In this work, we introduce TLSDeputy, a middlebox-based system to protect residential networks from connections to inauthentic TLS servers. By combining the approach with OpenFlow, a popular software-defined networking protocol, we show that we can effectively provide residential network-wide protections across diverse devices with minimal performance overheads.",

author = "Taylor, {Curtis R.} and Shue, {Craig A.}",

note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 2016 IEEE Conference on Communications and Network Security, CNS 2016 ; Conference date: 17-10-2016 Through 19-10-2016",

year = "2017",

month = feb,

day = "21",

doi = "10.1109/CNS.2016.7860493",

language = "English",

series = "2016 IEEE Conference on Communications and Network Security, CNS 2016",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "261--269",

booktitle = "2016 IEEE Conference on Communications and Network Security, CNS 2016",

}

Taylor, CR & Shue, CA 2017, Validating security protocols with cloud-based middleboxes. in 2016 IEEE Conference on Communications and Network Security, CNS 2016., 7860493, 2016 IEEE Conference on Communications and Network Security, CNS 2016, Institute of Electrical and Electronics Engineers Inc., pp. 261-269, 2016 IEEE Conference on Communications and Network Security, CNS 2016, Philadelphia, United States, 10/17/16. https://doi.org/10.1109/CNS.2016.7860493

Validating security protocols with cloud-based middleboxes. / Taylor, Curtis R.; Shue, Craig A.
2016 IEEE Conference on Communications and Network Security, CNS 2016. Institute of Electrical and Electronics Engineers Inc., 2017. p. 261-269 7860493 (2016 IEEE Conference on Communications and Network Security, CNS 2016).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Validating security protocols with cloud-based middleboxes

AU - Taylor, Curtis R.

AU - Shue, Craig A.

PY - 2017/2/21

Y1 - 2017/2/21

N2 - Residential networks pose a unique challenge for security since they are operated by end-users that may not have security expertise. Residential networks are also home to devices that may have lackluster security protections, such as Internet of Things (IoT) devices, which may introduce vulnerabilities. In this work, we introduce TLSDeputy, a middlebox-based system to protect residential networks from connections to inauthentic TLS servers. By combining the approach with OpenFlow, a popular software-defined networking protocol, we show that we can effectively provide residential network-wide protections across diverse devices with minimal performance overheads.

AB - Residential networks pose a unique challenge for security since they are operated by end-users that may not have security expertise. Residential networks are also home to devices that may have lackluster security protections, such as Internet of Things (IoT) devices, which may introduce vulnerabilities. In this work, we introduce TLSDeputy, a middlebox-based system to protect residential networks from connections to inauthentic TLS servers. By combining the approach with OpenFlow, a popular software-defined networking protocol, we show that we can effectively provide residential network-wide protections across diverse devices with minimal performance overheads.

UR - http://www.scopus.com/inward/record.url?scp=85016056852&partnerID=8YFLogxK

U2 - 10.1109/CNS.2016.7860493

DO - 10.1109/CNS.2016.7860493

M3 - Conference contribution

AN - SCOPUS:85016056852

T3 - 2016 IEEE Conference on Communications and Network Security, CNS 2016

SP - 261

EP - 269

BT - 2016 IEEE Conference on Communications and Network Security, CNS 2016

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2016 IEEE Conference on Communications and Network Security, CNS 2016

Y2 - 17 October 2016 through 19 October 2016

ER -

Validating security protocols with cloud-based middleboxes

Abstract

Publication series

Conference

Funding

Access to Document

Other files and links

Fingerprint

Cite this