%0 Conference Proceedings
%T Blockchain-Based Auditing of Transparent Log Servers
%+ Web Scale Trustworthy Collaborative Service Systems (COAST)
%A Nguyen, Hoang-Long
%A Eisenbarth, Jean-Philippe
%A Ignat, Claudia-Lavinia
%A Perrin, Olivier
%Z Part 1: Administration
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec)
%C Bergamo, Italy
%Y Florian Kerschbaum
%Y Stefano Paraboschi
%I Springer International Publishing
%3 Data and Applications Security and Privacy XXXII
%V LNCS-10980
%P 21-37
%8 2018-07-16
%D 2018
%R 10.1007/978-3-319-95729-6_2
%K Public key
%K Blockchain
%K Authentication
%K Auditing
%K Ethereum
%Z Computer Science [cs]/Software Engineering [cs.SE]
%Z Computer Science [cs]/Distributed, Parallel, and Cluster Computing [cs.DC]
%Z Computer Science [cs]/Cryptography and Security [cs.CR]Conference papers
%X Public key server is a simple yet effective way of key management in secure end-to-end communication. To ensure the trustworthiness of a public key server, CONIKS employs a tamper-evident data structure on the server and a gossiping protocol among clients in order to detect compromised servers. However, due to lack of incentive and vulnerability to malicious clients, a gossiping protocol is hard to implement in practice. Meanwhile, alternative solutions such as EthIKS are too costly. This paper presents Trusternity, an auditing scheme relying on Ethereum blockchain that is easy to implement, inexpensive to operate and resilient to malicious clients. We also conduct an empirical study of system behaviour in face of attacks and propose a lightweight anomaly detection algorithm to protect clients against such attacks.
%G English
%Z TC 11
%Z WG 11.3
%2 https://hal.science/hal-01917636/document
%2 https://hal.science/hal-01917636/file/DBSec.pdf
%L hal-01917636
%U https://hal.science/hal-01917636
%~ CNRS
%~ INRIA
%~ INRIA_TEST
%~ INRIA-LORRAINE
%~ LORIA2
%~ INRIA-NANCY-GRAND-EST
%~ TESTALAIN1
%~ IFIP-LNCS
%~ IFIP
%~ UNIV-LORRAINE
%~ INRIA2
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-WG11-3
%~ IFIP-DBSEC
%~ LORIA
%~ LORIA-NSS
%~ IFIP-LNCS-10980