PAS: Predicate-based authentication services against powerful passive adversaries

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2008, Pages 433-442

  Bai, Xiaole ^a   Gu, Wenjun ^a   Chellappan, Sriram ^b   Wang, Xun ^c   Xuan, Dong ^a   Ma, Bin ^d  

^a Ohio State University   (United States)

^b Architectural and Environmental Engineering   (United States)

^c CISCO SYSTEMS   (United States)

^d UNIVERSITY OF WATERLOO   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

ANALYTICAL DATUM; AUTHENTICATION SCHEMES; AUTHENTICATION SERVICES; AUXILIARY DEVICES; EXPERIMENTAL DATUM; HUMAN USERS; PASSIVE ADVERSARIES; PROTOTYPE SYSTEMS; USER FRIENDLINESS;

AUTHENTICATION; CRYPTOGRAPHY; PHOTOACOUSTIC SPECTROSCOPY; SECURITY SYSTEMS;

SECURITY OF DATA;

EID: 60649085571     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2008.23     Document Type: Conference Paper

References (27)

1. O. Goldreich, Foundations of Cryptography: Volume 1, Cambridge University Press, 2001.
2. P. Golle and D. Wagner, Cryptanalysis of a Cognitive Authentication Scheme, in Proc. of IEEE Symposium on Security and Privacy (S&P), 2007.
3. N. Haller, Internet RFC 1760, in Proc. of Symposium on Network and Distributed Systems Security (NDSS), 1994.
4. N. J Hopper and M. Blum, Secure Human Identification Protocols, in Proc. of The International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT), 2001.
5. http://world.std.com/reinhold/diceware.html.
6. http://pintday.org/advisories/misc/bwc-990420.html.
7. http://www.news8.net/news/stories/1107/476003.html.
8. S. Li and H. Y Shum, Secure Human Computer Identification against Peeping Attacks (SecHCI), Cryptology ePrint Archive, Report 2005/268, 2005.
9. G. Miller, The Magical Number Seven, Plus or Minus Two: Some Limits on Our Capacity for Processing Information, Psychological Review, vol 63, 1965.
10. T. Matsumoto, Cryptographic Human Identification, in Proc. of the 6th International Conference on Human Computer Interaction (HCI International), 1995.
11. T. Matsumoto, Human-Computer Cryptography: An Attempt, in Proc. of ACM Conference on Computer and Communications Security (CCS), 1996.
12. F. Massacci and L. Marraro, Towards the Formal Verification of Ciphers: Logical Cryptanalyis of DES, in Proc. of Federated Logic Conferences (FLOC), 1999.
13. F. Massacci and L. Marraro, Logical Cryptanalysis as a SAT Problem, Journal of Automated Reasoning, vol 24, 2000.
14. A. J Menezes, etc., Handbook of Applied Cryptography, CRC Press Series on Discrete Mathematics and Its Applications, CRC Press, Inc., 1996.
15. M. Mannan and P. Oorschot, Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer, Financial Cryptography and Data Security (FC'07), 2007.
16. J. M McCune, A. Perrig, and M. K Reiter, Bump in the Ether: A framework for securing sensitive user input, USENIX Annual Technical Conference, 2006.
17. S. Man, D. Hong, and M. Mathews, A Shouldersurfing Resistant Graphical Password Scheme, in Proc. of International Conference on Security and Management (ICSM), 2003.
18. McCune et al. Seeing-is-believing: Using camera phones for human-verifiable authentication, IEEE Symposium on Security and Privacy (S&P), 2005.
19. B. Parno, C. Kuo, and A. Perrig. Phoolproof phishing prevention, In Financial Cryptography and Data Security (FC), 2006.
20. A. D Rubin, Independent One-time Passwords, Computing Systems, 9(1), 1996.
21. SAT solver competition 2007, http://www.cril.univartois.fr/SAT07/ results/globalbybench.php?idev=11&idcat=61.
22. E. Vogel and M. Machizawa, Neural Acitivity Predicts Individual Differences in Visual Working Memory Capacity, Nature, 428, April, 2004.
23. D. Weinshall and S. Kirkpatrick, Passwords Youll Never Forget, but Cant Recall, in Proc. of ACM Conference on Human Factors in Computing Systems (CHI), 2004.
24. D. Weinshall, Cognitive Authentication Schemes Safe Against Spyware, in Proc. of IEEE Symposium on Security and Privacy (S&P), 2006.
25. C. H Wang, T. Hwang, and J. J Tsai, On the Matsumoto and Imai's Human Identification Scheme, in Advances in Cryptology - Eurocrypt, vol 921, 1995.
26. S. Wiedenbeck, J. Waters, L. Sobrado, and J. Birget, Design and evaluation of a shoulder surfing resistant graphical password scheme, in Proc. of the Working Conference on Advanced Visual Interfaces, Italy, 2006.
27. H. Zhao and X. Li, S3PAS: A Scalable Shoulder-Surfing Resistant Textual-Graphical Password Authentication Scheme, in Proc. of 21st international Conference on Advanced Information Networking and Applications Wprkshops, 2007.