Passpet: Convenient password management and phishing protection

ACM International Conference Proceeding Series

Volumn 149, Issue , 2006, Pages 32-43

  Yee, Ka Ping ^a   Sitaker, Kragen ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b NONE

Author keywords

[No Author keywords available]

Indexed keywords

DATA PROTECTION; LOGINS; PASSWORD HASHING; PASSWORD MANAGEMENT;

COMPUTER AIDED SOFTWARE ENGINEERING; DIGITAL LIBRARIES; STORAGE ALLOCATION (COMPUTER); USER INTERFACES; WEBSITES;

SECURITY OF DATA;

EID: 34250747969     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1143120.1143126     Document Type: Conference Paper

References (24)

1. M. Abadi, T. M. A. Lomas, and R. Needham. Strengthening Passwords. Technical Report 1997-033, SRC, 2005.
2. T. Close. Petname Tool, http://petname.mozdev.org/.
3. CoreStreet. Spoofstick. http://www.spoofstick.com/.
4. R. Dhamija and J. D. Tygar. The battle against phishing: Dynamic Security Skins. In Proc. 2005 Symposium on Usable Privacy and Securtiy, pages 77-88, 2005.
5. R. Dhamija, J. D. Tygar, and M. Hearst. Why Phishing Works. In Proc. CHI 2006 Conference on Human Factors in Computing Systems, 2006.
6. Earthlink. Earthlink Toolbar and ScamBlocker FAQ. http://kb.earthlink. net/case.asp?article=30492.
7. Earthlink. Earthlink Toolbar Featuring ScamBlocker for Windows Users. http://www.earthlink.net/software/free/toolbar/.
8. S. Fox, L. Rainie, J. Horrigan, A. Lenhart, T. Spooner, and C. Carter. Trust and privacy online: Why Americans want to rewrite the rules. August 2000. http://www.pewinternet.org/report_display.asp?r=19.
9. R. Franco. Better Website Identification and Extended Validation Certificates in IE7 and Other Browsers. November 2005. http: //blogs.msdn.com/ie/archive/2005/11/21/495507.aspx.
10. E. Gabber, P. B. Gibbons, Y. Matias, and A. Mayer. How to Make Personalized Web Browsing Simple, Secure, and Anonymous. In Proc. Financial Cryptography 1997. Springer-Verlag, February 1997.
11. E. Gabrilovich and A. Gontmakher. The Homograph Attack. Comm. of the ACM, 45(2):128, February 2002.
12. J. A. Halderman, B. Waters, and E. W. Felten. A Convenient Method for Securely Managing Passwords. In Proc. 14th International World-Wide Web Conference, 2005. http://www.cs.princeton.edu/~jhalderm/prejects/password/.
13. A. Herzberg and A. Gbara. TrustBar: Protecting (even Naïve) Web Users from Spoofing and Phishing Attacks. Cryptology ePrint Archive, Report 2004/155, 2004. http://www.cs.biu.ac.il/~herzbea/TrustBar/.
14. A. Karp. Site-Specific Passwords. Technical report, HP Labs, http: //www.hpl.hp.com/personal/Alan_Karp/site_password/.
15. J. Kelsey, B. Schneier, C. Hall, and D. Wagner. Secure Applications of Low-Entropy Keys. Lecture Notes in Computer Science, 1396:121-134, 1998.
16. R. Naraine. Microsoft Downgrades Claria Adware Detections. July 2005. http://www.eweek.com/article2/0,1895,1834607,00.asp.
17. Netcraft. Netcraft Anti-Phishing Toolbar. http://toolbar.netcraft.com/.
18. Netcraft. Netcraft Toolbar Privacy Policy. http://toolbar.netcraft.com/ privacypolicy.html.
19. Bank of America. Sign up for the SiteKey Service. http://www. bankofamerica.com/privacy/passmark/.
20. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. Stronger Password Authentication Using Browser Extensions. In Proc. 14th Usenix Security, 2005.
21. T. Sharif. Phishing Filter in IE7. September 2005. http://blogs.msdn.com/ ie/archive/2005/09/09/463204.aspx.
22. M. Stiegler. An Introduction to Petname Systems, http://www.skyhunter. com/marcs/petnames/IntroPetNames.html.
23. Protocom Development Systems. Global Password Usage Survey. September 2003. http://www.protocom.com/html/whitepapers/biz_password_survey.html.
24. T. Wu. The Secure Remote Password Protocol. In Proc. 1998 Internet Society Network and Distributed System Security Symposium, pages 97-111, March 1998.