• English
  • Deutsch
  • Log In
    or
  • Research Outputs
  • Projects
  • Researchers
  • Institutes
  • Statistics
Repository logo
Fraunhofer-Gesellschaft
  1. Home
  2. Fraunhofer-Gesellschaft
  3. Konferenzschrift
  4. MERCAT: A Metric for the Evaluation and Reconsideration of Certificate Authority Trustworthiness
 
  • Details
  • Full
Options
2019
  • Konferenzbeitrag

Titel

MERCAT: A Metric for the Evaluation and Reconsideration of Certificate Authority Trustworthiness

Abstract
Public key infrastructures (PKIs) build the foundation for secure communication of a vast majority of cloud services. In the recent past, there has been a series of security incidents leading to increasing concern regarding the trust model currently employed by PKIs. One of the key criticisms is the architecture's implicit assumption that certificate authorities (CAs) are trustworthy a priori. This work proposes a holistic metric to compensate this assumption by a differentiating assessment of a CA's individual trustworthiness based on objective criteria. The metric utilizes a wide range of technical and non-technical factors derived from existing policies, technical guidelines, and research. It consists of self-contained submetrics allowing the simple extension of the existing set of criteria. The focus is thereby on aspects which can be assessed by employing practically applicable methods of independent data collection. The metric is meant to help organizations, individuals, and service providers deciding which CAs to trust or distrust. For this, the modularized submetrics are clustered into coherent submetric groups covering a CA's different properties and responsibilities. By applying individually chosen weightings to these submetric groups, the metric's outcomes can be adapted to tailored protection requirements according to an exemplifying attacker model.
Author(s)
Heinl, Michael P.
Fraunhofer-Institut für Angewandte und Integrierte Sicherheit AISEC
Giehl, Alexander
Fraunhofer-Institut für Angewandte und Integrierte Sicherheit AISEC
Wiedermann, Norbert
Fraunhofer-Institut für Angewandte und Integrierte Sicherheit AISEC
Plaga, Sven
Fraunhofer-Institut für Angewandte und Integrierte Sicherheit AISEC
Kargl, Frank
University of Ulm
Hauptwerk
CCSW 2019, ACM SIGSAC Conference on Cloud Computing Security Workshop. Proceedings
Konferenz
Conference on Cloud Computing Security Workshop (CCSW) 2019
DOI
10.1145/3338466.3358917
File(s)
N-572098.pdf (1.17 MB)
Language
Englisch
google-scholar
AISEC
Tags
  • cloud security

  • metric

  • Ca

  • trustworthiness asses...

  • PKI

  • Digital Certificate

  • X.509

  • Cookie settings
  • Imprint
  • Privacy policy
  • Api
  • Send Feedback
© 2022