Performance comparison of web services security: Kerberos token profile against X.509 token profile

Moralis, A; Pouli, V; Grammatikou, M; Papavassiliou, S; Maglaris, V

dc.contributor.author	Moralis, A	en
dc.contributor.author	Pouli, V	en
dc.contributor.author	Grammatikou, M	en
dc.contributor.author	Papavassiliou, S	en
dc.contributor.author	Maglaris, V	en
dc.date.accessioned	2014-03-01T02:44:53Z
dc.date.available	2014-03-01T02:44:53Z
dc.date.issued	2007	en
dc.identifier.uri	https://dspace.lib.ntua.gr/xmlui/handle/123456789/32004
dc.subject	Kerberos	en
dc.subject	Public Key Infrastructure (PKI)	en
dc.subject	Web services	en
dc.subject	Web Services Security (WSS)	en
dc.subject	X.509	en
dc.subject.other	Information services	en
dc.subject.other	Public key cryptography	en
dc.subject.other	Standards	en
dc.subject.other	Web services	en
dc.subject.other	World Wide Web	en
dc.subject.other	International conferences	en
dc.subject.other	Kerberos	en
dc.subject.other	Numerica l results	en
dc.subject.other	Packet throughput	en
dc.subject.other	Perfor mance comparison	en
dc.subject.other	Performance evaluation (PE)	en
dc.subject.other	Public key (PK)	en
dc.subject.other	Symmetric cryptography (SC)	en
dc.subject.other	Symmetric encryption	en
dc.subject.other	Web services (WS)	en
dc.subject.other	Web services security (WSS)	en
dc.subject.other	WS security	en
dc.subject.other	Cryptography	en
dc.title	Performance comparison of web services security: Kerberos token profile against X.509 token profile	en
heal.type	conferenceItem	en
heal.identifier.primary	10.1109/ICNS.2007.93	en
heal.identifier.secondary	http://dx.doi.org/10.1109/ICNS.2007.93	en
heal.identifier.secondary	4438277	en
heal.publicationDate	2007	en
heal.abstract	Web Services (WS) Security is the set of standards that provides means for applying security to WS. In this paper we present the performance of the WS Security Kerberos Token profile in contrast to the X.509 Token Profile. The measurements are based on the Apache wss4j library for the X.509 Token Profile and the extensions we have made on the same library in order to support the Kerberos Token Profile. The Kerberos Token profile is based exclusively on symmetric cryptography, whereas the X.509 profile uses Public Key Cryptography for encrypting the symmetric encryption key used for deciphering the message. These differences in the nature of cryptography are reflected and quantified on the measurements we have performed. The performance evaluation and numerical results, demonstrated that Kerberos Token profile has up to 28% packet throughput improvement over the X.509 Token profile, under full CPU load on the server. © 2007 IEEE.	en
heal.journalName	3rd International Conference on Networking and Services,ICNS 2007	en
dc.identifier.doi	10.1109/ICNS.2007.93	en