Separation of SSL protocol phases across process boundaries

Secure Sockets Layer is the de-facto standard used in the industry today for secure communications through web sites. An SSL connection is established by performing a Handshake, which is followed by the Record phase. While the SSL Handshake is computationally intensive and can cause of bottlenecks on an application server, the Record phase can cause similar bottlenecks while encrypting large volumes of data. SSL Accelerators have been used to improve the performance of SSL-based application servers. These devices are expensive, complex to configure and inflexible to customizations. By separating the SSL Handshake and the Record phases into separate software processes, high availability and throughput can be achieved using open-source software and platforms. The delegation of the SSL Record phase to a separate process by transfer of necessary cryptographic information was achieved. Load tests conducted, showed gains with the separation of the Handshake and Record phases at nominal data sizes and the approach provides flexibility for enhancements to be carried out for performance improvements at higher data sizes.

Name thesis:degree_name

Master of Science in Computer Science - (M.S.)

Discipline thesis:degree_discipline

Computer Science

Year

2006

Author dc:creator

• Anantharam, Kirthikar

Contributors dc:contributor

• Andrew Sohn
• Alexandros V. Gerbessiotis
• Teunis J. Ott

• Secure Socket Layer (SSL)
• Secure communications
• Computer Sciences

Repository record dc:identifier

https://digitalcommons.njit.edu/theses/419

OAI identifier oai:identifier

oai:digitalcommons.njit.edu:theses-1418