@inproceedings{717ccb6826864ee9b104a05fbc29c097,
title = "Improving multi-tier security using redundant authentication",
abstract = "Multi-tier web server systems are used in many important contexts and their security is a major cause of concern. Such systems can exploit strategies like least privilege to make lower tiers more secure in the presence of compromised higher tiers. In this paper, we investigate an extension of this technique in which higher tiers are required to provide evidence of the authentication of principals when they make requests of lower tiers. This concept, which we call redundant authentication, enables lower tiers to provide security guarantees that improve significantly over current least privilege strategies. We validate this technique by applying it to a practical Building Automation System (BAS) application, where we explore the use of redundant authentication in conjunction with an authentication proxy to enable inter-operation with existing enterprise authentication services.",
keywords = "Authentication, Building Automation Systems",
author = "Boyer, {Jodie P.} and Ragib Hasan and Olson, {Lars E.} and Nikita Borisov and Gunter, {Carl A.} and David Raila",
year = "2007",
doi = "10.1145/1314466.1314475",
language = "English (US)",
isbn = "9781595938909",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
publisher = "Association for Computing Machinery",
pages = "54--62",
booktitle = "CSAW'07 - Proceedings of the 2007 ACM Computer Security Architecture Workshop",
address = "United States",
note = "1st ACM Computer Security Architectures Workshop, CSAW'07, held in association with the 14th ACM Computer and Communications Security Conference, CCS'07 ; Conference date: 02-11-2007 Through 02-11-2007",
}