文件名称:4
介绍说明－－下载内容均来自于网络，请自行研究使用
Keylogging and phishing attacks can extract user identity
and sensitive account information for unauthorized access to users’ financial
accounts. Most existing or proposed solutions are vulnerable to
session hijacking attacks. We propose a simple approach to counter these
attacks, which cryptographically separates a user’s long-term secret input
from (typically untrusted) client PCs a client PC performs most computations
but has access only to temporary secrets. The user’s long-term
secret (typically short and low-entropy) is input through an independent
personal trusted device such as a cellphone.-Keylogging and phishing attacks can extract user identity
and sensitive account information for unauthorized access to users’ financial
accounts. Most existing or proposed solutions are vulnerable to
session hijacking attacks. We propose a simple approach to counter these
attacks, which cryptographically separates a user’s long-term secret input
from (typically untrusted) client PCs a client PC performs most computations
but has access only to temporary secrets. The user’s long-term
secret (typically short and low-entropy) is input through an independent
personal trusted device such as a cellphone.
and sensitive account information for unauthorized access to users’ financial
accounts. Most existing or proposed solutions are vulnerable to
session hijacking attacks. We propose a simple approach to counter these
attacks, which cryptographically separates a user’s long-term secret input
from (typically untrusted) client PCs a client PC performs most computations
but has access only to temporary secrets. The user’s long-term
secret (typically short and low-entropy) is input through an independent
personal trusted device such as a cellphone.-Keylogging and phishing attacks can extract user identity
and sensitive account information for unauthorized access to users’ financial
accounts. Most existing or proposed solutions are vulnerable to
session hijacking attacks. We propose a simple approach to counter these
attacks, which cryptographically separates a user’s long-term secret input
from (typically untrusted) client PCs a client PC performs most computations
but has access only to temporary secrets. The user’s long-term
secret (typically short and low-entropy) is input through an independent
personal trusted device such as a cellphone.
相关搜索： phishing
(系统自动生成,下载前可以参看下载内容)
下载文件列表
(good)Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer.pdf