Lehigh University - CSE: Jun Li

Dr. Jun Li

"mSSL: Extending SSL to Support Data Sharing Among Collaborative Clients"

Monday, October 24, 4 PM

Packard Lab, Room 416

Abstract: Client-server applications often do not scale well when a large number of clients access a single server. To solve this, a new trend is to allow a client to download data from other peer clients, in addition to from its server directly. This paradigm, which we call the hybrid peer-to-peer paradigm, is friendly to the server's scalability, but also faces new security challenges. For example, how can the server authenticate its clients and support data confidentiality? How can a client trust the data downloaded from other clients? What if a client refuses to acknowledge the service it received or overstates the service it offered?

In this talk, I'll present a protocol, called mSSL, that provides a set of security functions to enable secure sharing of the data of a server among its clients. In addition to implementing access control and confidentiality, mSSL introduces an original design to support data integrity and proof of service in this new context.

Bio: Dr. Jun Li is an assistant professor at the University of Oregon. He received his Ph.D. from UCLA, 2002. His current research includes worm defense (funded by Intel), BGP routing (funded by NSF), IP spoofing prevention, and p2p security.

		Dr. Jun Li "mSSL: Extending SSL to Support Data Sharing Among Collaborative Clients" Monday, October 24, 4 PM Packard Lab, Room 416 Abstract: Client-server applications often do not scale well when a large number of clients access a single server. To solve this, a new trend is to allow a client to download data from other peer clients, in addition to from its server directly. This paradigm, which we call the hybrid peer-to-peer paradigm, is friendly to the server's scalability, but also faces new security challenges. For example, how can the server authenticate its clients and support data confidentiality? How can a client trust the data downloaded from other clients? What if a client refuses to acknowledge the service it received or overstates the service it offered? In this talk, I'll present a protocol, called mSSL, that provides a set of security functions to enable secure sharing of the data of a server among its clients. In addition to implementing access control and confidentiality, mSSL introduces an original design to support data integrity and proof of service in this new context. Bio: Dr. Jun Li is an assistant professor at the University of Oregon. He received his Ph.D. from UCLA, 2002. His current research includes worm defense (funded by Intel), BGP routing (funded by NSF), IP spoofing prevention, and p2p security.