A comparative study of secure device pairing methods

Pervasive and Mobile Computing

Volumn 5, Issue 6, 2009, Pages 734-749

  Kumar, Arun ^a   Saxena, Nitesh ^a   Tsudik, Gene ^b   Uzun, Ersin ^b  

^a POLYTECHNIC UNIVERSITY   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Device pairing; Human assisted authentication; Key agreement; Man in the middle attacks; Usable security

Indexed keywords

COMPUTER SCIENCE; MOBILE COMPUTING;

COMPARATIVE EVALUATIONS; DEVICE PAIRING; KEY AGREEMENT; MAN IN THE MIDDLE ATTACKS; SECURE DEVICE PAIRING; SECURITY AND USABILITIES; TRUST INFRASTRUCTURE; USABLE SECURITY;

NETWORK SECURITY;

EID: 70449686547     PISSN: 15741192     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.pmcj.2009.07.008     Document Type: Article

References (37)

1. Suomalainen J., Valkonen J., and Asokan N. Security associations in personal networks: A comparative analysis. In: Stajano F., Meadows C., Capkun S., and Moore T. (Eds). Security and Privacy in Ad-hoc and Sensor Networks Workshop, ESAS vol. 4572 (2007) 43-57
2. M. Jakobsson, S. Wetzel, Security weaknesses in bluetooth, in: The Cryptographer's Track at RSA, CT-RSA, 2001
3. C. Soriente, G. Tsudik, E. Uzun, BEDA: Button-Enabled Device Association, in: International Workshop on Security for Spontaneous Interaction IWSSI, UbiComp Workshop Proceedings, 2007
4. A. Kumar, N. Saxena, G. Tsudik, E. Uzun, Caveat emptor: A comparative study of secure device pairing methods, in: IEEE International Conference on Pervasive Computing and Communications, PerCom, 2009
5. Balfanz D., et al. Talking to strangers: Authentication in ad-hoc wireless networks. Network and Distributed System Security Symposium, NDSS (2002)
6. Gehrmann C., Mitchell C.J., and Nyberg K. Manual authentication for wireless devices. RSA CryptoBytes 7 1 (2004)
7. Vaudenay S. Secure communications over insecure channels based on short authenticated strings. Advances in Cryptology-CRYPTO (2005)
8. Čagalj M., Čapkun S., and Hubaux J.-P. Key agreement in peer-to-peer wireless networks. Proceedings of the IEEE 94 2 (2006) 467-478
9. Laur S., and Nyberg K. Efficient mutual data authentication using manually authenticated strings. International Conference on Cryptology and Network Security, CANS vol. 4301 (2006), Springer 90-107
10. S. Laur, K. Nyberg, Efficient mutual data authentication using manually authenticated strings, in: CANS, 2006, pp.90-107
11. Pasini S., and Vaudenay S. SAS-based authenticated key agreement. Public key cryptography. PKC (2006)
12. N. Saxena, et al. Extended abstract: Secure device pairing based on a visual channel, in: IEEE Symposium on Security and Privacy, 2006
13. N. Saxena, M.B. Uddin, Automated device pairing for asymmetric pairing scenarios, in: Information and Communications Security, ICICS, 2008, pp. 311-327
14. Boyko V., MacKenzie P., and Patel S. Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman. Advances in Cryptology-Eurocrypt (2000), Springer 156-171
15. F. Stajano, R.J. Anderson, The resurrecting duckling: Security issues for ad-hoc wireless networks, in: Security Protocols Workshop, 1999
16. D. Balfanz, et al. Network-in-a-box: How to set up a secure wireless network in under a minute, in: USENIX Security, 2004, pp. 207-222
17. I. Goldberg, Visual Key Fingerprint Code, http://www.cs.berkeley.edu/iang/visprint.c, 1996
18. A. Perrig, D. Song, Hash visualization: A new technique to improve real-world security, in: International Workshop on Cryptographic Techniques and E-Commerce, 1999
19. Ellison C.M., and Dohrmann S. Public-key support for group collaboration. ACM Transactions on Information and System Security (TISSEC) 6 4 (2003) 547-565
20. V. Roth, et al. Simple and effective defense against evil twin access points, in: ACM Conference on Wireless Network Security, WISEC, 2008, pp. 220-235
21. J.M. McCune, A. Perrig, M.K. Reiter, Seeing-is-believing: Using camera phones for human-verifiable authentication, in: IEEE Symposium on Security and Privacy, 2005
22. R. Prasad, N. Saxena, Efficient device pairing using "human-comparable" synchronized audiovisual patterns, in: Conference on Applied Cryptography and Network Security, ACNS, 2008
23. M. Goodrich, et al. Loud and clear: Human-verifiable authentication based on audio, in: IEEE International Conference on Distributed Computing Systems, ICDCS, 2006
24. Soriente C., Tsudik G., and Uzun E. HAPADEP: Human-assisted pure audio device pairing. Information Security (2008) 385-400
25. Goodrich M., et al. Audio-based secure device pairing. International Journal of Security and Networks 4 (2009)
26. E. Uzun, K. Karvonen, N. Asokan, Usability analysis of secure pairing methods, in: International Workshop on Usable Security, USEC, 2007
27. T. Kindberg, K. Zhang, Validating and securing spontaneous associations between wireless devices, in: Information Security Conference, ISC, 2003, pp. 44-53
28. Mayrhofer R., and Welch M. A human-verifiable authentication protocol using visible laser light. International Conference on Availability, Reliability and Security (ARES) (2007), IEEE Computer Society Washington, DC, USA 1143-1148
29. Holmquist L.E., et al. Smart-its friends: A technique for users to easily establish connections between smart artefacts. Ubiquitous Computing. UbiComp (2001), Springer-Verlag, London, UK 116-122
30. Mayrhofer R., and Gellersen H. Shake well before use: Authentication based on accelerometer data. Pervasive Computing. PERVASIVE (2007), Springer
31. R. Dhamija, J.D. Tygar, M.A. Hearst, Why phishing works, in: International Conference for Human-Computer Interaction, CHI, 2006
32. K. Kostiainen, E. Uzun, Framework for comparative usability testing of distributed applications, in: Security User Studies: Methodologies and Best Practices Workshop, 2007
33. J.M. McCune, Personal Communication, Mar. 2008
34. K. Kostiainen, Personal Communication, Mar. 2008
35. Faulkner L. Beyond the five-user assumption: Benefits of increased sample sizes in usability testing. Behavior Research Methods, Instruments, & Computers 35 3 (2003) 379-383
36. Cohen J., Cohen P., West S.G., and Aiken L.S. Applied multiple regression/correlation analysis for the behavioral sciences (1983), Lawrence Erlbaum Associates, Hillsdale, NJ
37. E. Frkjr, M. Hertzum, K. Hornbk, Measuring usability: Are effectiveness, efficiency, and satisfaction really correlated? CHI '00: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, 2000 pp. 345-352, http://doi.acm.org/10.1145/332040.332455