Securing Credentials on Untrusted Clients

Summary

IT systems rely on correct authentication of their users in order to provide confidentiality and integrity of data when accessing systems remotely, for instance over the Internet.

Keywords

Computer security, Confidentiality, Internet privacy, Computer science, Authentication (law)

References

Feature: IP spoofing and session hijackingDan Thomsen — 1995
Secure Web Authentication with Mobile PhonesMin Wu, Simson Garfinkel, Robert Miller — 2004
Authentication: From Passwords to Public KeysRichard E. Smith — 2001
PKI: Implementing and Managing E-SecurityAndrew Nash, William Duane, Celia Joseph — 2001
The Art of Deception: Controlling the Human Element of SecurityKevin D. Mitnick, William L. Simon — 2001
Computer Networking: A Top-Down ApproachJames F. Kurose, Keith W. Ross — 1999
Computer Security: Art and ScienceMatt Bishop — 2002
The Kerberos Network Authentication Service (V5)Clifford Neuman, Tom Yu, Sam Hartman — 1993
US Secure Hash Algorithm 1 (SHA1)D. Eastlake, Paul B. Jones — 2001
HMAC: Keyed-Hashing for Message AuthenticationHugo Krawczyk, Mihir Bellare, Ran Canetti — 1997
HOTP: An HMAC-Based One-Time Password AlgorithmFrank Hoornaert, David Naccache, Mihir Bellare — 2005
HTTP State Management MechanismDavid M. Kristol, Lou Montulli — 1997
Introduction to Cryptography with Coding TheoryLawrence C. Washington, Wade Trappe — 2002
Recent worms: a survey and trendsDarrell Kienzle, Matthew C. Elder — 2003
Keyloggers – your security nightmare?Sacha Chahrvin — 2007
ATM fraud prompts card rethinkNigel Walsh — 2005
Users are not the enemyAnne Adams, Martina Angela Sasse — 1999
Information Security ManagementHarold F. Tipton, Micki Krause — 2000
Challenges in securing networked J2ME applicationsAndré N. Klingsheim, Vebjørn Moen, Kjell Hole — 2007
Studying Bluetooth Malware Propagation: The BlueBag ProjectLuca Carettoni, Claudio Merloni, Stefano Zanero — 2007

Cited by

Contributions to Web Authentication for Untrusted ComputersAnna Vapen — 2011
Linköping Studies in Science and Technology Web Authentication Using Third-parties in Untrusted Environments Other Publications AcknowledgementsAnna Vapen, Populärvetenskaplig Sammanfattning, A Vapen
Linköping Studies in Science and Technology Contributions to Web Authentication for Untrusted Computers Contributions to Web Authentication for Untrusted Computers List of PublicationsAnna Vapen, David Byers, N. Shahmehri

Related papers

Secure Personal Authentication through Remote System for E-Transactions (SPARSE)V. L. Shivraj, M A Rajan, P. Balamuralidhar — 2014
Authentication Mechanisms for Open Distributed SystemsDavid Mazières, Victor Shoup, Antonio Nicolosi — 2007
PROVIDING CLOUD SECURITY BY COMBINING AUTHENTICATION METHODSV. Bahmani, M. A. Nasab — 2016
Practical anonymous authentication - Designing anonymous authentication for everyday useJan Hajný, Lukáš Malina, Václav Zeman — 2011
Highly Secured Architectural Model for Web Based Applications using 2-way Authentication TechniqueP K Binu, E Induja, Monica Earnest — 2018
Architectures for Enhancing Authentication Privacy and Security using Trusted ComputingRanjbar A. Balisane, Ravishankar Borgaonkar, Ahmad Atamli‐Reineh — 2017
Client-based authentication technology: user-centric authentication using secure containersConor P. Cahill, Jason Martin, Matthew W. Pagano — 2011
Implementation of multi-tier authentication technique for single-sign on access of cloud servicesMunjpara Priyesh Pravinbhai — 2014