One-time password access to any server without changing the server

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5222 LNCS, Issue , 2008, Pages 401-420

  Florêncio, Dinei ^a   Herley, Cormac ^a  

^a MICROSOFT RESEARCH   (United States)

Author keywords

Authentication; One time passwords; Passwords; Replay resistance

Indexed keywords

CELL PHONES; ONE-TIME PASSWORDS; PASSWORDS; REPLAY RESISTANCE;

HELIUM; TELECOMMUNICATION EQUIPMENT;

CELLULAR TELEPHONE SYSTEMS;

EID: 56649111147     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-85886-7_28     Document Type: Conference Paper

References (32)

1. http://labs.zarate.org/passwd/
2. http://www.cl.cam.ac.uk/~mgk25/otpw.html
3. http://www.rsasecurity.com
4. http://www.kyps.net
5. http://www.csoft.co.uk/sms/character_sets/encoding.htm
6. http://www.jmarshall.com/tools/cgiproxy
7. http://www.clickatell.com
8. http://www.fiddlertool.com
9. http://www.xk72.com/charles/
10. http://www.portswigger.net/proxy
11. Herley, C., Florêncio, D.: How To Login From an Internet Café without Worrying about Keyloggers. In: Symp. on Usable Privacy and Security (2006)
12. Cheswick, W.: Johnny Can Obfuscate: Beyond Mother's Maiden Name. In: Proc. Usenix HotSec (2006)
13. Coskun, B., Herley, C.: Can "Something You Know" be Saved? In: Wu, T.-C., Lei, C.-L., Rijmen, V., Lee, D.-T. (eds.) ISC 2008. LNCS, vol. 5222, pp. 421-440. Springer, Heidelberg (2008)
14. Florêncio, D., Herley, C.: A Large-Scale Study of Web Password Habits. In: WWW 2007, Banff (2007)
15. Florêncio, D., Herley, C.: KLASSP: Entering Passwords on a Spyware Infected Machine. In: Jesshope, C., Egan, C. (eds.) ACSAC 2006. LNCS, vol. 4186. Springer, Heidelberg (2006)
16. Florêncio, D., Herley, C., Coskun, B.: Do Strong Web Passwords Accomplish Anything?. In: Proc. Usenix Hot Topics in Security (2007)
17. Gaber, E., Gibbons, P., Matyas, Y., Mayer, A.: How to make personalized web browsing simple, secure and anonymous. In: Proc. Finan. Crypto 1997 (1997)
18. Golle, P., Wagner, D.: Cryptanalysis of a Cognitive Authentication Scheme. In: Symp. on Security and Privacy (2007)
19. Haller, N.: The S/KEY One-Time Password System. In: Proc. ISOC Symposium on Network and Distributed System Security (1994)
20. Herley, C., Florêncio, D.: Phishing as a Tragedy of the Commons. In: NSPW 2008, Lake Tahoe, CA (2008)
21. Jammalamadaka, R.C., van der Horst, T.W., Mehrotra, S., Seamons, K., Venkasubramanian, N.: Delegate: A Proxy based Architecture fort Secure Website Access from an Untrusted Machine. In: Jesshope, C., Egan, C. (eds.) ACSAC 2006. LNCS, vol. 4186. Springer, Heidelberg (2006)
22. Lamport, L.: Password Authentication with Insecure Communication. Communications of the ACM (1981)
23. Luotonen, A.: Web Proxy Servers. Prentice-Hall, Englewood Cliffs (1998)
24. Mannan, M., van Oorschot, P.C.: Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer. In: Dietrich, S., Dhamija, R. (eds.) FC 2007 and USEC 2007. LNCS, vol. 4886. Springer, Heidelberg (2007)
25. Wu, M., Garfinkel, S., Miller, R.: Secure Web Authentication with Mobile Phones. In: DIMACS Workshop on Usable Privacy and Security Software (2004)
26. Mao, Z., Herley, C.: Robust Reverse Proxy Implementation. MSR.-TR
27. Pashalidis, A., Mitchell, C.J.: Impostor: A single sign-on system for use from untrusted devices. In: Proceedings of IEEE Globecom (2004)
28. Pering, T., Sundar, M., Light, J., Want, R.: Photographic Authentication through Untrusted Terminals. IEEE Security and Privacy (2003)
29. Schneier, B.: Applied Cryptography, 2nd edn. Wiley, Chichester (1996)
30. Bell, T.C., Cleary, J.G., Witten, I.H.: Text Compression. Prentice-Hall, Englewood Cliffs (1990)
31. Tan, D., Keryana, P., Czerwinski, M.: Spy-resistant keyboard: more secure password entry on public touch screen displays. In: CHISIG 2005 (2005)
32. Weinshall, D.: Cognitive Authentication Schemes Safe Against Spyware. In: Symp. on Security and Privacy (2006)