SNP: An Interface for Secure Network Programming (1994)
| Venue: | IN PROCEEDINGS OF USENIX'94 SUMMER TECHNICAL CONFERENCE |
| Citations: | 12 - 8 self |
BibTeX
@INPROCEEDINGS{Woo94snp:an,
author = {Thomas Y. C. Woo and Raghuram Bindignavle and Shaowen Su and Simon S. Lam},
title = {SNP: An Interface for Secure Network Programming},
booktitle = {IN PROCEEDINGS OF USENIX'94 SUMMER TECHNICAL CONFERENCE},
year = {1994},
pages = {45--58},
publisher = {}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
SNP provides a high-level abstraction for secure end-toend network communications. It supports both stream and datagram semantics with security guarantees (e.g., data origin authenticity, data integrity and data confidentiality). It is designed to resemble the Berkeley sockets interface so that security can be easily retrofitted into existing socket programs with only minor modifications. SNP is built on top of GSS-API, thus making it relatively portable across different authentication mechanisms conforming to GSSAPI. SNP hides the details of GSS-API (e.g., credentials and contexts management), the communication sublayer as well as the cryptographic sublayer from the application programmers. It also encapsulates security sensitive information, thus preventing accidental or intentional disclosure by an application program.
