NISp1-09: PRIDE: Policy-Driven Web Security for Handheld Wireless Devices

In this paper we present PRIDE (Policy-driven web secuRity for handheld wireless DEvices) as an efficient security architecture for assuring the confidentiality and integrity of web traffic between wireless handheld devices and enterprise application servers. PRIDE is a scalable, policy-based solution capable of evolving and adapting to suit the security requirements of a wide range of wireless devices with various capabilities and resources. The customizable policy-based architecture in PRIDE can be configured to provide the security services according to the content and sensitivity of the network data in a web transaction. This gives PRIDE considerable performance gains over existing bulk encryption protocols such as SSI. PRIDE is designed as a platform- independent architecture and can be seamlessly integrated into existing application servers and wireless mobile client devices.