loading...
On Compromising Password-Based Authentication over HTTPS
Vienna, Austria April 18-April 20
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/AINA.2006.24420th International Conference on Adva ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Takamichi SAITO, Meiji University, JAPAN
Ryosuke HATSUGAI, Meiji University, JAPAN
Toshiyuki KIT0, Meiji University, JAPAN
SSL (Secure Socket Layer) is one of the security protocols to achieve secure communications over a TCP/IP network. SSL has two types of authentication modes, Server Authentication mode and Client Authentication mode. The former is popular and facile to utilize, while the latter is secure enough owing to mutual authentication. However, when it was required to identify a client or its user, Server Authentication mode can be utilized with Basic Authentication which is authentacation with password to achieve mutual authentication. In this paper, we discuss the compromising of authentication using the password-based authentication over SSL. And we show the countermeasures against the attaclcs.
Citation:
Takamichi SAITO, Ryosuke HATSUGAI, Toshiyuki KIT0, "On Compromising Password-Based Authentication over HTTPS," aina, vol. 1, pp.869-874, 20th International Conference on Advanced Information Networking and Applications - Volume 1 (AINA'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.