WebALPS: A Survey of E-Commerce Privacy and Security Applications S.W. Smith Department of Computer Science/ Institute for Security Technology Studies Dartmouth College Hanover, New Hampshire 03755 USA sws@cs.dartmouth.edu Web-based commerce is rife with scenarios where a party needs to trust properties of computation and data storage occurring at a remote machine, operated by a di erent party with di erent interests. In our WebALPS project, we have used o -the-shelf hardware and open source software to build trusted co-servers co-resident with Web servers, and bring the secure SSL channel all the way into these trusted co-servers. In this paper, we survey how this tool can be used to systematically address privacy and security issues in e-commerce. 1. INTRODUCTION Moving commercial activity into distributed electronic environments creates a fundamental trust problem: how does a client know what happens at remote sites? The current secure Web infrastructure addresses some issues of server authentication and channel protection, but does not address this core trust problem. This paper surveys how our WebALPS project may help address these issues. (We refer the reader to other reports [Jiang 2001; Jiang et al. 2001; Knop 2001] for architectural and implementation details.) 1.1 Trust Issues
/lp/association-for-computing-machinery/webalps-a-survey-of-e-commerce-privacy-and-security-applications-uUX9P6qydR