A virtual password scheme to protect passwords

IEEE International Conference on Communications

Volumn , Issue , 2008, Pages 1536-1540

  Lei, Ming ^a   Xiao, Yang ^a   Vrbsky, Susan V ^a   Li, Chung Chih ^b   Liu, Li ^a  

^a UNIVERSITY OF ALABAMA   (United States)

^b ILLINOIS STATE UNIVERSITY   (United States)

Author keywords

Attack; Internet; Passward

Indexed keywords

ATTACK; INTERNATIONAL CONFERENCES; INTERNET; PASSWARD;

VIRTUAL REALITY;

EID: 51249089651     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2008.297     Document Type: Conference Paper

References (34)

1. T. Dierks and C. Allen. The TLS Protocol - Version 1.0. IETF RFC 2246,January 1999.
2. http://en.wikipedia.org/wiki/Phishing
3. Anti-phishing working group. http://www.antiphishing.org.
4. http://en.wikipedia.org/wiki/Key_logger
5. http://www.eweek.com/article2/0,1895,1940623,00.asp
6. B. Ross, C. Jackson, N. Miyake, D. Boneh, J. Mitchell, "Stronger Password Authentication Using Browser Extensions," Proceedings of 14th USENIX Security Symposium.
7. E. Gaber, P. Gobbons, Y. Mattias, and A. Mayer, "How to make personalized web browsing simple, secure, and anonymous," Proceedings of Financial Crypto '97, volume 1318 of LNCS.Springer-Verlag, 1997.
8. E. Gabber, P. Gibbons, D. Kristol, Y. Matias, and A. Mayer, "On secure and pseudonymous user-relationships with multiple servers," ACM Transactions on Information and System Security, 2(4):390-415, 1999.
9. E. Jung. Passwordmaker. http://passwordmaker.mozdev.org.
10. J. la Poutr? e, "Password composer," http://www.xs4all.nl/? jlpoutre/BoT/Javascript/PasswordComposer/.
11. J. R. Levine, "A Flexible Method to Validate SMTP Senders in DNS," Apr. 2004. http://www1.ietf.org/proceedings_new/04nov/IDs/draft- levine-fsv-01.txt.
12. V. A. Brennen, "Cryptography Dictionary," vol. 2005,1.0.0 ed, 2004.
13. http://www.bell-labs.com/project/lpwa/
14. E. Damiani et al., "Spam Attacks: P2P to the Rescue," Proceedings of Thirteenth International World Wide Web Conference, pages 358-359, 2004.
15. M. Abadi, L. Bharat, and A. Marais, "System and method for generating unique passwords," US Patent 6,141,760, 1997.
16. M. Kuhn, "Probability theory for pickpockets - ec-PIN guessing," Available at http://www.cl.cam.ac.uk/?mgk25/, 1997.
17. C. Herley and D. Florencio, "How To Login From an Internet Caf? e Without Worrying About Keyloggers," Proceedigns of Symposium on Usable Privacy and Security (SOUPS) '06
18. http://www.citibank.co.jp/en/service/cap/virtualpad/
19. http://obr.typepad.com/financial_innovations/2005/11/ing_direct_adds.html
20. MÖLLER, B. Schwächen des ec-PIN-Verfahrens. Available at http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller, Feb. 1997. Manuscript.
21. A. Herzberg and A. Gbara, "Trustbar: Protecting (even naive) web users from spoofing and phishing attacks," Cryptology ePrint Archive, Report 2004/155, 2004. http://eprint.iacr.org/2004/155.
22. S. Wiedenbeck, J. Waters, L. Sobrado, and J. Birget, "Design and evaluation of a shoulder-surfing resistant graphical password scheme," Proc. of the working conference on Advanced visual interfaces,Venezia, Italy.
23. V. Roth, K. Richter, and R. Freidinger, "A PIN-entry method resilient against shoulder-surfing," Proc. of the 11th ACM Conference on Computer and Communications Security, 2004,236-245.
24. IETF. MTA Authorization Records in DNS (MARID),June 2004. http://www.ietf.org/html.charters/OLD/marid-charter.html.
25. G. Ateniese, K. Fu, M. Green, and S. Hohenberger, "Improved Proxy Re-encryption Schemes with Applications to Secure Distributed Storage," Proceedings of the 12th Annual Network and Distributed System Security Symposium,2005.
26. G. T. Wilfong, "Method and apparatus for secure PIN entry," US Patent #5,940,511, United States Patent and Trademark Office, May 1997. Assignee: Lucent Technologies, Inc. (Murray Hill, NJ).
27. J. Mason, "Filtering Spam with SpamAssassin," Proceedings of HEANet Annual Conference, 2002.
28. D. Stinson, Cryptography Theory and Practice, Second Edition. 2005, CRC Press.
29. M. Sahami, S. Dumais, D. Heckerman, and E.Horvitz, "A Bayesian Approach to Filtering Junk E-Mail.In Learning for Text Categorization," The 1998 Workshop, May 1998
30. T.A. Meyer and B. Whateley, "SpamBayes: Effective open-source, Bayesian based, email classification system," Proc. of CEAS 2004.
31. MAPS. RBL - Realtime Blackhole List, 1996.http://www.mailabuse.com/ services/mds_rbl.html.
32. The Spamhaus Project. The Spamhaus Block List.http://www.spamhaus.org/ sbl/.
33. Netcraft. Anti-Phishing Toolbar. http://news.netcraft.com/archives/2004/ 12/28/netcraft_antiphishing_tool%bar_available_for_download.html.
34. Y. Xiao, C.-C. Li, M. Lei, and S. V. Vrbsky, "Secret Little Functions and Codebook for Protecting Users from Password Theft," Proc. of IEEE ICC 2008.