Authentication in distributed systems

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	S. M. Bellovin , M. Merritt, Limitations of the Kerberos authentication system, ACM SIGCOMM Computer Communication Review, v.20 n.5, p.119-132, Oct 1 1990 [doi>10.1145/381906.381946]
	2	[2] P. Bieber. A logic of communication in hostile environment. In The Computer Security Foundations Workshop III, pages 14-22. IEEE, IEEE Computer Society Press, June 1990.
	3	Andrew D. Birrell, Secure communication using remote procedure calls, ACM Transactions on Computer Systems (TOCS), v.3 n.1, p.1-14, Feb. 1985 [doi>10.1145/214451.214452]
	4	R V Book , F Otto, The verifiability of two-party protocols, Proc. of a workshop on the theory and application of cryptographic techniques on Advances in cryptology---EUROCRYPT '85, p.254-260, January 1986, Linz, Austria
	5	[5] M. Burrows, M. Abadi, and R. Needham. Authentication: A practical study in belief and action. Technical Report 138, University of Cambridge Computer Laboratory, 1988.
	6	[6] M. Burrows, M. Abadi, and R. Needham. A logic of authentication. Technical Report 39, Digital Equipment Corporation System Research Center, Palo Alto, Calif., Feb. 1989.
	7	M. Burrows , M. Abadi , R. Needham, A logic of authentication, Proceedings of the twelfth ACM symposium on Operating systems principles, p.1-13, November 1989
	8	Michael Burrows , Martin Abadi , Roger Needham, A logic of authentication, ACM Transactions on Computer Systems (TOCS), v.8 n.1, p.18-36, Feb. 1990 [doi>10.1145/77648.77649]
	9	Michael Burrows , Martín Abadi , Roger Needham, Rejoinder to Nessett, ACM SIGOPS Operating Systems Review, v.24 n.2, p.39-40, April 1990 [doi>10.1145/382258.382790]
	10	[10] CCITT. CCITT Blue Book, Recommendation X.509 and ISO 9594-8, Information Processing Systems-Open Systems Interconnection - The Directory - Authentication Framework. Technical report, Geneva, Mar. 1988.
	11	[11] P.-C. Cheng and V. D. Gligor. On the formal specification and verification of a multiparty session protocol. In Proc. of the IEEE Symposium on Research in Security and Privacy, pages 216-233, Oakland, CA, May 1990.
	12	Don Davis , Ralph Swick, Network security via private-key certificates, ACM SIGOPS Operating Systems Review, v.24 n.4, p.64-67, Oct. 1990 [doi>10.1145/94574.94579]
	13	Dorothy E. Denning , Giovanni Maria Sacco, Timestamps in key distribution protocols, Communications of the ACM, v.24 n.8, p.533-536, Aug. 1981 [doi>10.1145/358722.358740]
	14	Yvo Desmedt , Claude Goutier , Samy Bengio, Special Uses and Sbuses of the Fiat-Shamir Passport Protocol, A Conference on the Theory and Applications of Cryptographic Techniques on Advances in Cryptology, p.21-39, August 16-20, 1987
	15	Whitfield Diffie , Paul C. Van Oorschot , Michael J. Wiener, Authentication and authenticated key exchanges, Designs, Codes and Cryptography, v.2 n.2, p.107-125, June 1992 [doi>10.1007/BF00124891]
	16	[16] D. Dolev and A. Yao. On the security of public key protocols. In 22nd Annual Symposium on Foundations of Computer Science, pages 350-357. IEEE, 1981.
	17	[17] D. Dolev and A. Yao. On the security of public key protocols. IEEE Trans. Inf. Theory, IT-29(2): 198- 208, Mar. 1983.
	18	U. Feige , A. Fiat , A. Shamir, Zero-knowledge proofs of identity, Journal of Cryptology, v.1 n.2, p.77-94, Aug. 1988 [doi>10.1007/BF02351717]
	19	Amos Fiat , Adi Shamir, How to prove yourself: practical solutions to identification and signature problems, Proceedings on Advances in cryptology---CRYPTO '86, p.186-194, January 1987, Santa Barbara, California, United States
	20	Walter Fumy , Michael Munzert, A Modular Approach to Key Distribution, Proceedings of the 10th Annual International Cryptology Conference on Advances in Cryptology, p.274-283, August 11-15, 1990
	21	[21] K. Gaarder and E. Snekkenes. Applying a formal analysis technique to the CCITT X.509 strong two-way authentication protocol. Journal of Cryptology, 3(2): 81-98, 1991.
	22	[22] M. Gasser, A. Goldstein, C. Kaufman, and B. Lampson. The Digital distributed system security architecture. In Proc. of the 12th National Computer Security Conference, pages 305-319. NIST/NCSC, Oct. 1989.
	23	L. Gong, Using one-way functions for authentication, ACM SIGCOMM Computer Communication Review, v.19 n.5, p.8-11, Oct. 1989 [doi>10.1145/74681.74682]
	24	Li Gong, A security risk of depending on synchronized clocks, ACM SIGOPS Operating Systems Review, v.26 n.1, p.49-53, Jan. 1992 [doi>10.1145/130704.130709]
	25	[25] L. Gong, R. Needham, and R. Yahalom. Reasoning about belief in cryptographic protocols. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 234-248. IEEE, 1990.
	26	[26] J. Y. Halpern and Y. Moses. A guide to the modal logics of knowledge and belief: Preliminary draft. In Proc. 9th International Joint Conference on AI, pages 479-490, 1985.
	27	Ralf C. Hauser , E. Stewart Lee, Verification and Modelling of Authentication Protocols, Proceedings of the Second European Symposium on Research in Computer Security, p.141-154, November 23-25, 1992
	28	Patrick Horster , Hans-Joachim Knobloch, Protokolle zum Austausch authenischer Schlüssel, Verläßliche Informationssysteme, GI-Fachtagung, p.321-328, March 13-15, 1991
	29	Collin I'Anson , Chris Mitchell, Security defects in CCITT recommendation X.509: the directory authentication framework, ACM SIGCOMM Computer Communication Review, v.20 n.2, p.30-34, April, 1990 [doi>10.1145/378570.378623]
	30	[30] P. Janson and R. Molva. Security in open networks and distributed systems. Computer Networks and ISDN Systems, 22(5): 323-346, 1991.
	31	[31] P. A. Karger. Authentication and discretionary access control in computer networks. Computer Networks , 10(1): 26-33, 1985.
	32	[32] C. Kaufman. DASS - distributed authentication security service. Internet Draft, Oct. 1991. Available by anonymous ftp from nnsc.nsf.net (East Coast), ftp.nisc.sri.com (West Coast), munnari.oz.au (Pacific Rim) or nic.nordu.net (Europe), in the "internet-drafts" directory, under the name draft-ietf-cat-dass- 00.ps or draft-ietf-cat-dass-00.txt.
	33	A. Kehne , J. Schönwälder , H. Langendörfer, A nonce-based protocol for multiple authentications, ACM SIGOPS Operating Systems Review, v.26 n.4, p.84-89, Oct. 1992 [doi>10.1145/142854.142872]
	34	[34] R. A. Kemmerer. Analyzing encryption protocols using formal verification techniques. IEEE Journal on Selected Areas in Communications, 7(4): 448-457, May 1989.
	35	[35] J. Kohl and B. C. Neuman. Kerberos version 5 RFC, revision 5. Technical report, MIT Project Athena, 1992.
	36	[36] S. Landau. Zero knowledge and the Department of Defense. Notices of the American Mathematical Society, 35(1): 5-13, Jan. 1988.
	37	Rotraut Laun, Asymmetric user authentication, Computers and Security, v.11 n.2, p.173-183, April 1992 [doi>10.1016/0167-4048(92)90044-R]
	38	T. Lomas , L. Gong , J. Saltzer , R. Needhamn, Reducing risks from poorly chosen keys, Proceedings of the twelfth ACM symposium on Operating systems principles, p.14-18, November 1989
	39	D. Langley, Experts systems applied to the analysis of key management schemes, Computers and Security, v.6 n.1, p.54-67, Feb. 1987 [doi>10.1016/0167-4048(87)90126-X]
	40	[40] D. Longley and S. Rigby. Use of expert systems in the analysis of key management systems. In A. Grissonnanche, editor, Security and Protection in Information Systems, pages 213-224. North-Holland, 1989.
	41	D. Longley , S. Rigby, An automatic search for security flaws in key management schemes, Computers and Security, v.11 n.1, p.75-89, March 1992 [doi>10.1016/0167-4048(92)90222-D]
	42	[42] C. Meadows. Using narrowing in the analysis of key management protocols. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 138-147, Oakland, CA, 1989. IEEE.
	43	[43] C. Meadows. Representing partial knowledge in an algebraic security model. In The Computer Security Foundations Workshop III, pages 23-31. IEEE, IEEE Computer Society Press, June 1990.
	44	[44] C. Meadows. A system for the specification and analysis of key management protocols. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 182-195. IEEE, 1991.
	45	[45] C. Meadows. Applying formal methods to the analysis of a key management protocol. Journal of Computer Security, 1(1): 5-35, 1992.
	46	Silvio Micali , Adi Shamir, An Improvement of the Fiat-Shamir Identification and Signature Scheme, Proceedings of the 8th Annual International Cryptology Conference on Advances in Cryptology, p.244-247, August 21-25, 1988
	47	Jonathan K. Millen , Sidney C. Clark , Sheryl B. Freeman, The Interrogator: Protocol Secuity Analysis, IEEE Transactions on Software Engineering, v.13 n.2, p.274-288, February 1987 [doi>10.1109/TSE.1987.233151]
	48	[48] S. Miller, B. Neuman, J. I. Schiller, and J. Saltzer. Section E.2.1: Kerberos authentication and authorization system. Project Athena Technical Plan, M.I.T. Project Athena, Cambridge, Massachussetts, Dec. 1987.
	49	Roger M. Needham , Michael D. Schroeder, Using encryption for authentication in large networks of computers, Communications of the ACM, v.21 n.12, p.993-999, Dec. 1978 [doi>10.1145/359657.359659]
	50	R M Needham , M D Schroeder, Authentication revisited, ACM SIGOPS Operating Systems Review, v.21 n.1, p.7-7, Jan. 1987 [doi>10.1145/24592.24593]
	51	Dan M. Nessett, A critique of the Burrows, Abadi and Needham logic, ACM SIGOPS Operating Systems Review, v.24 n.2, p.35-38, April 1990 [doi>10.1145/382258.382789]
	52	[52] B. C. Neuman. Proxy-based authorization and accounting for distributed systems. Technical Report 91-02-01, University of Washington, Seattle, Washington 98195, Mar. 1991.
	53	B. Clifford Neuman , Stuart G. Stubblebine, A note on the use of timestamps as nonces, ACM SIGOPS Operating Systems Review, v.27 n.2, p.10-14, April 1993 [doi>10.1145/155848.155852]
	54	Kazuo Ohta , Tatsuaki Okamoto, A Modification of the Fiat-Shamir Scheme, Proceedings of the 8th Annual International Cryptology Conference on Advances in Cryptology, p.232-243, August 21-25, 1988
	55	Dave Otway , Owen Rees, Efficient and timely mutual authentication, ACM SIGOPS Operating Systems Review, v.21 n.1, p.8-10, Jan. 1987 [doi>10.1145/24592.24594]
	56	D. Russell, High-level security architectures and the Kerberos system, Computer Networks and ISDN Systems, v.19 n.3-5, p.201-214, Nov. 1990 [doi>10.1016/0169-7552(90)90073-2]
	57	[57] J. I. Schiller. Kerberos: Network authentication for today's open networks. ConneXions, 4(1): 10-13, Jan. 1990.
	58	D P Sidhu, Authentication protocols for computer networks: I, Computer Networks and ISDN Systems, v.11 n.4, p.297-310, April 1986 [doi>10.1016/0169-7552(86)90004-8]
	59	[59] E. Snekkenes. Exploring the BAN approach to protocol analysis. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 171-181. IEEE, 1991.
	60	Einer Snekkenes, Roles in Cryptographic Protocols, Proceedings of the 1992 IEEE Symposium on Security and Privacy, p.105, May 04-06, 1992
	61	[61] K. R. Sollins. Cascaded authentication. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 156-163, Oakland, California, Apr. 1988.
	62	[62] J. G. Steiner and D. E. Geer. Network services in the Athena environment. In EUUG Autumn 88, pages 63-72, Cascais, Oct. 1988.
	63	[63] J. G. Steiner, C. Neuman, and J. I. Schiller. Kerberos: An authentication service for open network systems. In USENIX Conference Proceedings, pages 191-202, Dallas, Texas, Feb. 1988.
	64	[64] P. Syverson. Formal semantic for logics of cryptographic protocols. In The Computer Security Foundations Workshop III, pages 32-41. IEEE, IEEE Computer Society Press, June 1990.
	65	[65] P. Syverson. The use of logic in the analysis of cryptographic protocols. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 156-170. IEEE, 1991.
	66	[66] J. J. Tardo and K. Alagappan. SPX: Global authentication using public key certificates. In Proc. of the Symp. on Research in Security and Privacy, pages 232-244. IEEE, 1991.
	67	[67] M.-J. Toussaint. Deriving the Complete Knowledge of Participants in Cryptographic Protocols, pages 24-43. Springer Verlag, 1992. Lecture Notes Comput. Sci., 576.
	68	V. Varadharajan, Verification of network security protocols, Computers and Security, v.8 n.9, p.693-708, Dec. 1989 [doi>10.1016/0167-4048(89)90008-4]
	69	Victor L. Voydock , Stephen T. Kent, Security Mechanisms in High-Level Network Protocols, ACM Computing Surveys (CSUR), v.15 n.2, p.135-171, June 1983 [doi>10.1145/356909.356913]
	70	Thomas Y. C. Woo , Simon S. Lam, Authentication for Distributed Systems, Computer, v.25 n.1, p.39-52, January 1992 [doi>10.1109/2.108052]
	71	[71] J. C. Wray. A security architecture for distributed systems. Internetworking: Research and Experience, 2(2): 87-111, June 1991.