A study of user-friendly hash comparison schemes

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2009, Pages 105-114

  Hsiao, Hsu Chun ^a   Lin, Yue Hsun ^b   Studer, Ahren ^a   Studer, Cassandra ^a   Wang, King Hang ^b   Kikuchi, Hiroaki ^c   Perrig, Adrian ^a   Sun, Hung Min ^b   Yang, Bo Yin ^d  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b NATIONAL TSING HUA UNIVERSITY   (Taiwan)

^c TOKAI UNIVERSITY   (Japan)

^d ACADEMIA SINICA   (Taiwan)

Author keywords

Human factors; Security

Indexed keywords

COMPARATIVE STUDIES; HASH VALUE; HUMAN FACTORS; ONLINE USERS; SECURITY PROTOCOLS; VARYING BACKGROUND;

COMPUTER APPLICATIONS; HUMAN ENGINEERING; NETWORK PROTOCOLS;

NETWORK SECURITY;

EID: 77950844750     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2009.20     Document Type: Conference Paper

References (18)

1. D. Balfanz, D. Smetters, P. Stewart, and H. Wong, "Talking to strangers: Authentication in ad-hoc wireless networks," in Proceedings of the 9th Annual Network and Distributed System Security Symposium (NDSS), 2002.
2. C.-H. O. Chen, C.-W. Chen, C. Kuo, Y.-H. Lai, J. M. McCune, A. Studer, A. Perrig, B.-Y. Yang, and T.-C. Wu, "GAnGS: Gather Authenticate 'n Group Securely," in Proceedings of the ACM Annual International Conference on Mobile Computing and Networking, Sep. 2008.
3. C. Ellison and S. Dohrmann, "Public-key support for group collaboration," ACM Transactions on Information and System Security (TISSEC), vol.6, no.4, pp. 547-565, 2003.
4. B. Ford, J. Strauss, C. Lesniewski-Laas, S. Rhea, F. Kaashoek, and R. Morris, "Persistent personal names for globally connected mobile devices," in Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Nov. 2006.
5. th ACM Conference on Computer and Communications Security (CCS), 1998.
6. M. T. Goodrich, M. Sirivianos, J. Solis, G. Tsudik, and E. Uzun, "Loud and clear: Human-verifiable authentication based on audio," in International Conference on Distributed Computing (ICDCS), 2006, p. 10.
7. Y.-H. Lin, A. Studer, H.-C. Hsiao, J. McCune, K.-H. Wang, M. Krohn, P.-L. Lin, A. Perrig, H.-M. Sun, and B.-Y. Yang, "SPATE: Small-group PKI-less Authenticated Trust Establishment," in Proceedings of the 7th ACM/USENIX International Conference on Mobile Systems, Applications, and Services, Jun. 2009.
8. Linksky, J. et al., "Simple Pairing Whitepaper, revision v10r00," http://www.bluetooth.com/NR/rdonlyres/0A0B3F36-D15F-4470-85A6- F2CCFA26F70F/0/SimplePairing-WP-V10r00.pdf, August 2006.
9. V. Lortz, D. Roberts, B. Erdmann, F. Dawidowsky, K. Hayes, J. C. Yee, and T. Ishidoshiro, "Wi-Fi Simple Config Specification, version 1.0a," February 2006, now known as Wi-Fi Protected Setup.
10. OpenBSD project, "OpenSSH v. 5.1," http://www.openssh.com/, Jul. 2008.
11. E. Uzun, K. Karvonen, and N. Asokan, "Usability analysis of secure pairing methods," in Usable Security (USEC), Feb. 2007.
12. A. Perrig and D. Song, "Hash visualization: A new technique to improve real-world security," in Proceedings of the 1999 International Workshop on Cryptographic Techniques and E-Commerce (CrypTEC), July 1999, pp. 131-138.
13. S. Josefsson, "RFC4648: The Base16, Base32, and Base64 data encodings," http://www.ietf.org/rfc/rfc4648.txt, Oct. 2006.
14. "The unicode standard, 5.0, chapter 11," 2006.
15. H. Lee, "Perceptual image diff," http://pdiff.sourceforge.net/, Dec 2006.
16. Amazon Web Services, "Amazon mechanical turk (MTurk)," https://www.mturk.com/, Nov. 2005.
17. M. Blum, "Coin flipping by telephone," in Advances in Cryptography, Aug. 1982, pp. 11-15.
18. A. Orlitsky, N. Santhanam, and K. Viswanathan, "Population estimation with performance guarantees," in IEEE International Symposium on Information Theory (ISIT), 2007, pp. 2026-2030.