Document Type
Thesis
Date of Award
Spring 5-31-2006
Degree Name
Master of Science in Computer Science - (M.S.)
Department
Computer Science
First Advisor
Andrew Sohn
Second Advisor
Alexandros V. Gerbessiotis
Third Advisor
Teunis J. Ott
Abstract
Secure Sockets Layer is the de-facto standard used in the industry today for secure communications through web sites. An SSL connection is established by performing a Handshake, which is followed by the Record phase. While the SSL Handshake is computationally intensive and can cause of bottlenecks on an application server, the Record phase can cause similar bottlenecks while encrypting large volumes of data.
SSL Accelerators have been used to improve the performance of SSL-based application servers. These devices are expensive, complex to configure and inflexible to customizations. By separating the SSL Handshake and the Record phases into separate software processes, high availability and throughput can be achieved using open-source software and platforms. The delegation of the SSL Record phase to a separate process by transfer of necessary cryptographic information was achieved. Load tests conducted, showed gains with the separation of the Handshake and Record phases at nominal data sizes and the approach provides flexibility for enhancements to be carried out for performance improvements at higher data sizes.
Recommended Citation
Anantharam, Kirthikar, "Separation of SSL protocol phases across process boundaries" (2006). Theses. 419.
https://digitalcommons.njit.edu/theses/419
