國立高雄大學圖資館 |

Language: English

Back

Leakage resilient password systems

Deng, Robert H.

Leakage resilient password systems

Record Type:	Electronic resources : Monograph/item
Title/Author:	Leakage resilient password systemsby Yingjiu Li, Qiang Yan, Robert H. Deng.
Author:	Li, Yingjiu.
other author:	Yan, Qiang.
Published:	Cham :Springer International Publishing :2015.
Description:	x, 64 p. :ill., digital ;24 cm.
Contained By:	Springer eBooks
Subject:	ComputersAccess control
Online resource:	http://dx.doi.org/10.1007/978-3-319-17503-4
ISBN:	9783319175034 (electronic bk.)

Leakage resilient password systems
Li, Yingjiu.

Leakage resilient password systems[electronic resource] /by Yingjiu Li, Qiang Yan, Robert H. Deng. - Cham :Springer International Publishing :2015. - x, 64 p. :ill., digital ;24 cm. - SpringerBriefs in computer science,2191-5768. - SpringerBriefs in computer science..

Leakage Resilient Password Systems: Attacks, Principles and Usability -- Cover Pad: A Leakage Resilient Password System on Touch-Screen Mobile Devices -- Shadow Key: A Practical Leakage Resilient Password System.

This book investigates tradeoff between security and usability in designing leakage resilient password systems (LRP) and introduces two practical LRP systems named Cover Pad and ShadowKey. It demonstrates that existing LRP systems are subject to both brute force attacks and statistical attacks and that these attacks cannot be effectively mitigated without sacrificing the usability of LRP systems. Quantitative analysis proves that a secure LRP system in practical settings imposes a considerable amount of cognitive workload unless certain secure channels are involved. The book introduces a secure and practical LRP system, named Cover Pad, for password entry on touch-screen mobile devices. Cover Pad leverages a temporary secure channel between a user and a touch screen which can be easily realized by placing a hand shielding gesture on the touch screen. The temporary secure channel is used to deliver a hidden message to the user for transforming each password symbol before entering it on the touch screen. A user study shows the impact of these testing conditions on the users' performance in practice. Finally, this book introduces a new LRP system named ShadowKey. Shadow Key is designed to achieve better usability for leakage resilient password entry. It leverages either a permanent secure channel, which naturally exists between a user and the display unit of certain mobile devices, or a temporary secure channel, which can be easily realized between a user and a touch screen with a hand-shielding gesture. The secure channel protects the mappings between original password symbols and associated random symbols. Unlike previous LRP system users, Shadow Key users do not need to remember anything except their passwords. Leakage Resilient Password Systems is designed for professionals working in the security industry. Advanced-level students studying computer science and electrical engineering will find this brief full of useful material.

ISBN: 9783319175034 (electronic bk.)

Standard No.: 10.1007/978-3-319-17503-4doiSubjects--Topical Terms:

454553
Computers
--Access control

LC Class. No.: QA76.9.A25

Dewey Class. No.: 005.8

Leakage resilient password systems
LDR:03191nmm a2200337 a 4500 001 465521
003 DE-He213
005 20151110155937.0
006 m d
007 cr nn 008maaau
008 151222s2015 gw s 0 eng d
020 $a 9783319175034 (electronic bk.)
020 $a 9783319175027 (paper)
024 7 $a 10.1007/978-3-319-17503-4 $2 doi
035 $a 978-3-319-17503-4
040 $a GP $c GP
041 0 $a eng
050 4 $a QA76.9.A25
072 7 $a UR $2 bicssc
072 7 $a UTN $2 bicssc
072 7 $a COM053000 $2 bisacsh
082 0 4 $a 005.8 $2 23
090 $a QA76.9.A25 $b L693 2015
100 1 $a Li, Yingjiu. $3 515696
245 1 0 $a Leakage resilient password systems $h [electronic resource] / $c by Yingjiu Li, Qiang Yan, Robert H. Deng.
260 $a Cham : $b Springer International Publishing : $b Imprint: Springer, $c 2015.
300 $a x, 64 p. : $b ill., digital ; $c 24 cm.
490 1 $a SpringerBriefs in computer science, $x 2191-5768
505 0 $a Leakage Resilient Password Systems: Attacks, Principles and Usability -- Cover Pad: A Leakage Resilient Password System on Touch-Screen Mobile Devices -- Shadow Key: A Practical Leakage Resilient Password System.
520 $a This book investigates tradeoff between security and usability in designing leakage resilient password systems (LRP) and introduces two practical LRP systems named Cover Pad and ShadowKey. It demonstrates that existing LRP systems are subject to both brute force attacks and statistical attacks and that these attacks cannot be effectively mitigated without sacrificing the usability of LRP systems. Quantitative analysis proves that a secure LRP system in practical settings imposes a considerable amount of cognitive workload unless certain secure channels are involved. The book introduces a secure and practical LRP system, named Cover Pad, for password entry on touch-screen mobile devices. Cover Pad leverages a temporary secure channel between a user and a touch screen which can be easily realized by placing a hand shielding gesture on the touch screen. The temporary secure channel is used to deliver a hidden message to the user for transforming each password symbol before entering it on the touch screen. A user study shows the impact of these testing conditions on the users' performance in practice. Finally, this book introduces a new LRP system named ShadowKey. Shadow Key is designed to achieve better usability for leakage resilient password entry. It leverages either a permanent secure channel, which naturally exists between a user and the display unit of certain mobile devices, or a temporary secure channel, which can be easily realized between a user and a touch screen with a hand-shielding gesture. The secure channel protects the mappings between original password symbols and associated random symbols. Unlike previous LRP system users, Shadow Key users do not need to remember anything except their passwords. Leakage Resilient Password Systems is designed for professionals working in the security industry. Advanced-level students studying computer science and electrical engineering will find this brief full of useful material.
650 0 $a Computers $x Access control $x Passwords. $3 454553
650 0 $a Computer security. $3 184416
650 0 $a Data protection. $3 202312
650 1 4 $a Computer Science. $3 212513
650 2 4 $a Systems and Data Security. $3 274481
650 2 4 $a Information Systems and Communication Service. $3 274025
650 2 4 $a Communications Engineering, Networks. $3 273745
650 2 4 $a Data Encryption. $3 273765
700 1 $a Yan, Qiang. $3 719305
700 1 $a Deng, Robert H. $3 670680
710 2 $a SpringerLink (Online service) $3 273601
773 0 $t Springer eBooks
830 0 $a SpringerBriefs in computer science. $3 559641
856 4 0 $u http://dx.doi.org/10.1007/978-3-319-17503-4
950 $a Computer Science (Springer-11645)