On the Security of PAS (Predicate-Based Authentication Service)

Zitieren

Dateien zu dieser Ressource

Prüfsumme: MD5:ec65ff57cff977e5ac7dac1a92bdb103

LI, Shujun, Hassan Jameel ASGHAR, Josef PIEPRZYK, Ahmad-Reza SADEGHI, Roland SCHMITZ, Huaxiong WANG, 2009. On the Security of PAS (Predicate-Based Authentication Service). 2009 Annual Computer Security Applications Conference (ACSAC). Honolulu, Hawaii, USA, 7. Dez 2009 - 11. Dez 2009. In: 2009 Annual Computer Security Applications Conference. 2009 Annual Computer Security Applications Conference (ACSAC). Honolulu, Hawaii, USA, 7. Dez 2009 - 11. Dez 2009. IEEE, pp. 209-218. ISBN 978-0-7695-3919-5

@inproceedings{Li2009-12Secur-5986, title={On the Security of PAS (Predicate-Based Authentication Service)}, year={2009}, doi={10.1109/ACSAC.2009.27}, isbn={978-0-7695-3919-5}, publisher={IEEE}, booktitle={2009 Annual Computer Security Applications Conference}, pages={209--218}, author={Li, Shujun and Asghar, Hassan Jameel and Pieprzyk, Josef and Sadeghi, Ahmad-Reza and Schmitz, Roland and Wang, Huaxiong} }

<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:bibo="http://purl.org/ontology/bibo/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" xmlns:xsd="http://www.w3.org/2001/XMLSchema#" > <rdf:Description rdf:about="https://kops.uni-konstanz.de/rdf/resource/123456789/5986"> <dc:creator>Pieprzyk, Josef</dc:creator> <dc:language>eng</dc:language> <dcterms:issued>2009-12</dcterms:issued> <dc:creator>Asghar, Hassan Jameel</dc:creator> <dc:contributor>Sadeghi, Ahmad-Reza</dc:contributor> <dc:creator>Schmitz, Roland</dc:creator> <bibo:uri rdf:resource="http://kops.uni-konstanz.de/handle/123456789/5986"/> <dcterms:available rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2011-03-24T16:08:34Z</dcterms:available> <dcterms:bibliographicCitation>First publ in: Proceedings : 25th Annual Computer Security Applications Conference, Honolulu, Hawaii, 7-11 December, 2009. Los Alamitos, Calif. : IEEE Computer Society, 2009. pp. 209 - 218</dcterms:bibliographicCitation> <dc:date rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2011-03-24T16:08:34Z</dc:date> <dc:contributor>Wang, Huaxiong</dc:contributor> <dc:contributor>Asghar, Hassan Jameel</dc:contributor> <dc:contributor>Li, Shujun</dc:contributor> <dc:contributor>Pieprzyk, Josef</dc:contributor> <dc:creator>Wang, Huaxiong</dc:creator> <dc:creator>Li, Shujun</dc:creator> <dc:creator>Sadeghi, Ahmad-Reza</dc:creator> <dc:format>application/pdf</dc:format> <dcterms:abstract xml:lang="eng">Recently a new human authentication scheme called PAS (predicate-based authentication service) was proposed, which does not require the assistance of any supplementary device. The main security claim of PAS is to resist passive adversaries who can observe the whole authentication session between the human user and the remote server. In this paper we show that PAS is insecure against both brute force attack and a probabilistic attack. In particular, we show that its security against brute force attack was strongly overestimated. Furthermore, we introduce a probabilistic attack, which can break part of the password even with a very small number of observed authentication sessions. Although the proposed attack cannot completely break the password, it can downgrade the PAS system to a much weaker system similar to common OTP (one-time password) systems.</dcterms:abstract> <dcterms:rights rdf:resource="http://nbn-resolving.org/urn:nbn:de:bsz:352-20140905103416863-3868037-7"/> <dc:rights>deposit-license</dc:rights> <dc:contributor>Schmitz, Roland</dc:contributor> <dcterms:title>On the Security of PAS (Predicate-Based Authentication Service)</dcterms:title> </rdf:Description> </rdf:RDF>

Dateiabrufe seit 01.10.2014 (Informationen über die Zugriffsstatistik)

Li.1pdf.pdf 128

Das Dokument erscheint in:

KOPS Suche


Stöbern

Mein Benutzerkonto