Secure input for web applications

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2007, Pages 375-384

  Szydlowski, Martin ^a   Kruegel, Christopher ^a   Kirda, Engin ^a  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER APPLICATIONS; COMPUTER CRIME; SECURITY SYSTEMS;

ACCESS TO INFORMATION; CARD READERS; CHIP-CARDS; COMPUTER SECURITY APPLICATIONS; MALWARE; PERIPHERAL DEVICES; TROJAN HORSES; USER INPUT; WEB APPLICATIONS; WEB SECURITY; WEB USERS; WEB-BASED ATTACKS;

WORLD WIDE WEB;

EID: 48649085499     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2007.28     Document Type: Conference Paper

References (27)

1. Anti-phishing Working Group. http://www.antiphishing.org.
2. D. Balfanz and E. Felten. Hand-Held Computers Can Be Better Smart Cards. In Proceedings of the 8th Usenix Security Symposium, 1999.
3. Carnegie Mellon University. The CAPTCHA Project. http://www.captcha.net.
4. W. Cheswick. Johnny Can Obfuscate: Beyond Mother's Maiden Name. In Proceedings of the 1st USENIX Workshop on Hot Topics in Security (HotSec), 2006.
5. N. Chou, R. Ledesma, Y. Teraguchi, and J. C. Mitchell. Client-side defense against web-based identity theft. In Proceedings of the Network and Distributed Systems Security (NDSS), 2004.
6. FinExtra.com. Phishers move to counteract bank security programmes. http://www.finextra.com/fullstory.asp?id=14149.
7. S. Hocevar. PWNtcha - Captcha Decoder. http://sam.zoy.org/pwntcha.
8. N. Hopper and M. Blum. Secure Human Identification Protocols. In AsiaCrypt, 2001.
9. IETF Working Group. Transport Layer Security (TLS). http://www.ietf.org/ html.charters/tls-charter.html, 2006.
10. International Organization for Standardization (ISO). ISO 7816 Smart Card Standard. http://www.iso.org/.
11. C. Jackson, D. Boneh, and J. C. Mitchell. Stronger Password Authentication Using Virtual Machines. http://crypto.stanford.edu/SpyBlock/ spyblock.pdf.
12. A. Josang, D. Povey, and A. Ho. What You See is Not Always What You Sign. In Annual Technical Conference of the Australian UNIX and Open Systems User Group, 2002.
13. I. Krawarik and M. Kwauka. Attacken aufs Konto (in German). http://www.ispa.at/www/getFile.php?id=846, Jan 2007.
14. T. Matsumoto and H. Imai. Human Identification Through Insecure Channel. In EuroCrypt, 1991.
15. J. M. McCune, A. Perrig, and M. K. Reiter. Bump in the Ether: A Framework for Securing Sensitive User Input. In Proceedings of the USENIX Annual Technical Conference, June 2006.
16. Microsoft Corporation. Internet Explorer 7 features. http://www. microsoft.com/windows/ie/ie7/about/features/default.mspx.
17. G. Mori and J. Malik. Recognizing Objects in Adversarial Clutter: Breaking a Visual CAPTCHA. In Proceedings of the IEEE Computer Vision and Pattern Recognition Conference (CVPR). IEEE Computer Society Press, 2003.
18. S. Mori, C. Y. Suen, and K. Yamamoto. Historical review of OCR research and development. Document image analysis, pages 244-273, 1995.
19. A. Moshchuk, T. Bragin, S. D. Gribble, and H. M. Levy. A Crawler-based Study of Spyware on the Web. In Proceedings of the 13th Annual Network and Distributed System Security Symposium (NDSS), February 2006.
20. S. Pearson. Trusted Computing Platforms. Prentice Hall, 2002.
21. Pressetext Austria. Phishing-Schäden bleiben am Kunden hängen (in German). http://www.pressetext.at/pte.mc?pte=061116033, Nov 2006.
22. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. Stronger Password Authentication Using Browser Extensions. In Proceedings of the 14th Usenix Security Symposium, 2005.
23. Secure Information Technology Center Austria (A-SIT). The Austrian Citizen Card. http://www.buergerkarte.at/index en.html, 2005.
24. A. Spalka, A. Cremers, and H. Langweg. Protecting the Creation of Digital Signatures with Trusted Computing Platform Technology Against Attacks by Trojan Horse. In IFIP Security Conference, 2001.
25. A. Spalka, A. Cremers, and H. Langweg. Trojan Horse Attacks on Software for Electronic Signatures. Informatica, 26, 2002.
26. W3C Working Group. Inaccessibility of CAPTCHA, Alternatives to Visual Turing Tests on the Web. http://www.w3.org/TR/turingtest/.
27. C. Wang, H. Hwang, and T. Tsai. One the Matsumoto and Imai's human identification scheme. In EuroCrypt, 1995.