European Workshop on System Security最新文献

筛选

英文中文

Logging based IP Traceback in switched ethernets 交换以太网中基于日志的IP回溯

European Workshop on System Security Pub Date : 2008-03-31 DOI: 10.1145/1355284.1355286

M. Andreou, A. Moorsel

引用次数: 10

SC@CCO: a Graphic-Based Authentication System SC@CCO:基于图形的认证系统

European Workshop on System Security Pub Date : 2008-03-31 DOI: 10.1145/1355284.1355287

Rosalia D'Alessandro, M. Ghirardi, M. Leone

{"title":"SC@CCO: a Graphic-Based Authentication System","authors":"Rosalia D'Alessandro, M. Ghirardi, M. Leone","doi":"10.1145/1355284.1355287","DOIUrl":"https://doi.org/10.1145/1355284.1355287","url":null,"abstract":"At the present time, phishing attacks are more and more sophisticated and they continue to be an issue, especially for financial institutes. The most common defense mechanisms used today are effective if the phishing attack is passive, while completely useless in the case of active phishing attacks. To face both threats, we propose SC@CCO, an innovative system combining the security of challenge-response and two factor authentication mechanisms. SC@CCO uses an untrustworthy terminal, such as a shared computer, and an insecure channel, such as the Internet, to carry a graphic challenge from which a trusted mobile terminal computes the expected authentication response. The latter is shown to the user and subsequently submitted to the server, along with a personal identification number, in order to complete the authentication. The graphic challenge is obtained by encoding a challenge into a bi-dimensional barcode image. The trusted mobile terminal of the user must be equipped with a common digital camera and an appropriate client application. In the present approach, the personal mobile device plays the role of a security token able to authenticate, on one hand, who is issuing a transaction, and, on the other hand, the transaction data, with the advantage that the user does not have to install devices and/or software on an untrustworthy computer.","PeriodicalId":302603,"journal":{"name":"European Workshop on System Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-03-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129863358","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

首页上一页