Security sieve: a technique for enhancing the performance of secure sockets layer-based distributed systems. Issue 5 (2nd September 2016)

• Record Type: Journal Article
• Authors: Lim, Norman; Majumdar, Shikharesh; Srivastava, Vineet
• Is Part Of: International journal of parallel, emergent and distributed systems. Volume 31:Issue 5(2016)
• Page Start: 481
• Page End: 503
• Publication Date: 2016-09-02
• Subjects: SSL/TLS performance -- performance engineering of SSL/TLS -- security system performance -- performance optimization; Parallel computers -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Computer algorithms -- Periodicals; 004.35
• DOI: 10.1080/17445760.2015.1071367
• Languages: English
• ISSNs: 1744-5760

Abstract

ABSTRACT: Providing secure communication in distributed systems often introduces a performance penalty due to the CPU-intensive operations used by security protocols such as the Secure Sockets Layer (SSL) protocol. This paper proposes a technique, called security sieve, which enhances the performance of SSL-based document transmission. Security sieve separates the sensitive components from the non-sensitive components, and transmits the separated components over a secure channel and a (faster) non-secure channel, respectively. At the receiving end, the separated components are re-assembled to reconstruct the original document. A significant performance improvement with security sieve is observed for a number of system and workload parameters.