lightweight authentication for email and web
play

Lightweight Authentication for Email (and Web?) Ben Adida - PowerPoint PPT Presentation

Sep 05, 2023 •124 likes •335 views

Lightweight Authentication for Email (and Web?) Ben Adida ben@mit.edu PAW/DIG Meeting June 30th, 2005 (joint work with Susan Hohenberger and Ronald L. Rivest) Distributed Phishing Friends and Colleagues Jakobsson & Young 2005

  1. Lightweight Authentication for Email (and Web?) Ben Adida ben@mit.edu PAW/DIG Meeting June 30th, 2005 (joint work with Susan Hohenberger and Ronald L. Rivest)

  8. Distributed Phishing • Friends and Colleagues • Jakobsson & Young 2005

  9. Review SMTP Today DNS foo.com 2 MX MX Record mail.foo.com wonderland.com mail.foo.com outgoing incoming 3 mail server mail server 4 1 Alice Bob

  10. Review No Proof of Origin phish.com ? wonderland.com mail.foo.com outgoing incoming mail server mail server Alice Bob

  11. Review ID-Based Crypto "bob@foo.com" keyserver MPK MSK PK bob SK bob Alice Bob

  12. New ID-based Domains MPK foo.com MPK wonderland . com wonderland.com foo.com keyserver keyserver MSK wonderland . com MSK foo.com SK bob @ foo . com SK alice @ wonderland . com Alice Bob

  13. DNS to distribute New Master Public Keys DNS wonderland.com MPK wonderland . com Publish foo.com MPK foo . com wonderland.com key server MSK wonderland . com [DomainKeys]

  14. Email-Based New Authentication SK alice @ wonderland . com wonderland.com wonderland.com keyserver incoming MSK wonderland . com mail server [Gar2003] Alice

  15. Tweaks & Optimizations • Key Revocation - expiration date in the ID string: “ ben@mit.edu - 2005-04-26” • Domain Policies immediate deletion of spoofed emails. • Alternate Keyserver bootstrap individual users. Different Trust.

  16. Repudiability Alice Bob Eve Repudiability is about Privacy

  17. Ad-Hoc Group Sigs From: Alice To: Bob Subject: Account Your monthly balance is available at: http://wonderbank.com Signed: Alice or Bob

  18. Hijacking Keys for AHGS I signed this message, OR I have your secret key - Signature or Encryption key - Factoring-, DL-, BM-based algorithms - All known keypairs work! [AHR2005]

  19. Putting it All Together [AHR2005] DNS wonderbank.com MPK bank 1 1 PUBLISH PUBLISH foo.com MPK foo wonderbank.com foo.com key server key server MPK foo 3 6 MPK bank SK A 2 4 "bob@foo.com" PK B 9 From: Alice To: Bob Subject: Account 7 "alice@wonderbank.com" Your monthly balance is available at: http://wonderbank.com Alice Bob Signed: Alice or Bob PK A Wonderbank.com foo.com 5 8 Network Network

  20. Web Authentication? Request for Resource Web Server Request for Authentication PK Alice Signature on Nonce, Repudiable Against PK

  21. Questions?

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

OPT : LIGHTWEIGHT SOURCE AUTHENTICATION & PATH VALIDATION

OPT : LIGHTWEIGHT SOURCE AUTHENTICATION & PATH VALIDATION

OPT : LIGHTWEIGHT SOURCE AUTHENTICATION & PATH VALIDATION Tiffany Hyun-Jin Kim , 1 Cris(na Basescu, 2 Limin Jia, 1 Soo Bum Lee, 3 Yih-Chun Hu, 4 and Adrian

502 views • 26 slides
A new lightweight Crypto Library for supporting an Advanced Grid Authentication Process

A new lightweight Crypto Library for supporting an Advanced Grid Authentication Process

A new lightweight Crypto Library for supporting an Advanced Grid Authentication Process with Smart Cards Roberto BARBERA (1)(2) , Vincenzo CIASCHINI (3) , Alberto FALZONE (4) , Giuseppe LA ROCCA (1)

456 views • 32 slides
KRB-CCN: Lightweight Authentication & Access Control for Private Content-Centric Networks

KRB-CCN: Lightweight Authentication & Access Control for Private Content-Centric Networks

KRB-CCN: Lightweight Authentication & Access Control for Private Content-Centric Networks Ivan O. Nunes and Gene Tsudik University of California Irvine {ivanoliv, gene.tsudik}@uci.edu ACNS 2018 1 Agenda CCN Overview

604 views • 59 slides
Lightweight Encryption for Email Ben Adida ben@mit.edu 7 July 2005 joint work with Susan

Lightweight Encryption for Email Ben Adida ben@mit.edu 7 July 2005 joint work with Susan

Lightweight Encryption for Email Ben Adida ben@mit.edu 7 July 2005 joint work with Susan Hohenberger and Ronald L. Rivest MIT Cryptography and Information Security Group Motivation To Improve/Restore the Usefulness of Email

487 views • 28 slides
Lightweight Authentication of Freshness in Outsourced Key-Value Stores (ACSAC14) Yuzhe Tang,

Lightweight Authentication of Freshness in Outsourced Key-Value Stores (ACSAC14) Yuzhe Tang,

Lightweight Authentication of Freshness in Outsourced Key-Value Stores (ACSAC14) Yuzhe Tang, Ting Wang, Ling Liu, Xin Hu, Jiyong Jang Cloud Computing Cloud computing has arrived: Almost all human activities can be supported by cloud

486 views • 31 slides
FIDES: Lightweight Authentication Cipher with Side-Channel Resistance for Constrained Hardware

FIDES: Lightweight Authentication Cipher with Side-Channel Resistance for Constrained Hardware

FIDES: Lightweight Authentication Cipher with Side-Channel Resistance for Constrained Hardware Begl Bilgin, Andrey Bogdanov, Miroslav Kne evi , Florian Mendel, and Qingju Wang 1 DIAC 2013, Chicago Side Channel Resistance 2 Side

1.29k views • 76 slides
A Lightweight Statistical Authentication Protocol for Access Control in Wireless LANs Haoli Wang,

A Lightweight Statistical Authentication Protocol for Access Control in Wireless LANs Haoli Wang,

A Lightweight Statistical Authentication Protocol for Access Control in Wireless LANs Haoli Wang, Joel Cardo, Yong Guan ECE, Iowa State University ASWN 2004 Introduction Emergence of visitor networks Visitor Networks: LANs that are

671 views • 13 slides
Its time to Think Lightweight! www.thinklightweight.com TO D A Y S TO P IC S 1.

Its time to Think Lightweight! www.thinklightweight.com TO D A Y S TO P IC S 1.

Its time to Think Lightweight! www.thinklightweight.com TO D A Y S TO P IC S 1. About Think Lightweight 2. What are Lightweight Structures? 3. Industry Applications 4. Product Line Review 5. Think Lightweight Component

832 views • 43 slides
Peer-to-peer Sender Authentication for Email Vivek Pathak and Liviu Iftode Rutgers University

Peer-to-peer Sender Authentication for Email Vivek Pathak and Liviu Iftode Rutgers University

Peer-to-peer Sender Authentication for Email Vivek Pathak and Liviu Iftode Rutgers University Email Trustworthiness Sender can be spoofed Need for Sender Authentication Importance depends on sender Update on Spam Filters

1.02k views • 55 slides
View The Email to Get Hacked: Attacking SMS-based Two-Factor Authentication Philipp Markert,

View The Email to Get Hacked: Attacking SMS-based Two-Factor Authentication Philipp Markert,

View The Email to Get Hacked: Attacking SMS-based Two-Factor Authentication Philipp Markert, Florian Farke, and Markus Drmuth Santa Clara, California, USA | WAY 2019 | August 11, 2019 Two-Factor Authentication 1 1 2 1 Gmail 2FA

415 views • 28 slides
AUTHENTICATION AUTHENTICATION Authentication is the process by which you decide that someone is

AUTHENTICATION AUTHENTICATION Authentication is the process by which you decide that someone is

SECURITY TOPICS PART 2 AUTHENTICATION AUTHENTICATION Authentication is the process by which you decide that someone is who they say they are and therefore permitted to access the requested resources: getting entrance to a computer lab

833 views • 44 slides
HOST Authentication Overview ECE 525 Authentication Overview Authentication refers to the

HOST Authentication Overview ECE 525 Authentication Overview Authentication refers to the

HOST Authentication Overview ECE 525 Authentication Overview Authentication refers to the process of verifying the identity of the communicating principals to one another Usually sub-divided into Entity authentication Authentication

288 views • 10 slides
Authentication Most technical security safeguards have Authentication authentication as a

Authentication Most technical security safeguards have Authentication authentication as a

Authentication Most technical security safeguards have Authentication authentication as a precondition How to authenticate: Something you know Password, Secrets Something you have Smart Card, Token Something you are Biometrie

607 views • 4 slides
Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Cryptography Authentication and Data Integrity Aims of Authentication Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication with Hash Cryptography Functions Authentication with MACs School of

1.66k views • 27 slides
Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication

Cryptography Authentication and Data Integrity Aims of Authentication Authentication and Data Integrity Authentication with Symmetric Key Encryption Authentication with Hash Cryptography Functions Authentication with MACs School of

613 views • 27 slides
UCSB Identity and LDAP The central campus directory and authentication system UCSB Identity

UCSB Identity and LDAP The central campus directory and authentication system UCSB Identity

UCSB Identity and LDAP The central campus directory and authentication system UCSB Identity System UCSBnetID authentication UCSB-wide student and employee info http://www.identity.ucsb.edu/ LDAP Overview Lightweight Directory Access Protocol

604 views • 24 slides
App App App App App App App App App App App App App App App App App App App App App App

App App App App App App App App App App App App App App App App App App App App App App

App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App Making Data-Driven Porting Decisions with Tuscan Kareem Khazem Earl T. Barr

1.18k views • 103 slides
On The Use Of An Algebraic Language Interface For Waveform Definition Michael L Dickens and

On The Use Of An Algebraic Language Interface For Waveform Definition Michael L Dickens and

On The Use Of An Algebraic Language Interface For Waveform Definition Michael L Dickens and J Nicholas Laneman WINNF11US 2011-Dec-02 Thursday, November 17, 2011 Overview ! Blocks versus Buffers ! Problem ! Saline Implementation !

475 views • 43 slides
B A C D B A The existential question Why OSGi? Hello World is not a

B A C D B A The existential question Why OSGi? Hello World is not a

OSGi enRoute An Development Chain for OSGi B A C D B A The existential question Why OSGi? Hello World is not a benchmark Dev Chain Language Small versus Large dynamic Java & languages OSGi cost of change

878 views • 71 slides
Resumable Java Bytecode Process Mobility for the JVM Jan Pedersen and Brian Kauke Overview The

Resumable Java Bytecode Process Mobility for the JVM Jan Pedersen and Brian Kauke Overview The

Resumable Java Bytecode Process Mobility for the JVM Jan Pedersen and Brian Kauke Overview The ProcessJ language Transparent process mobility Implementing mobility in the Java/JCSP translation Intro to ProcessJ ProcessJ is a new

285 views • 25 slides
GNU Emacs A guide to packaging add-ons Presented by Arun S.A.G Package maintainer, Fedora

GNU Emacs A guide to packaging add-ons Presented by Arun S.A.G Package maintainer, Fedora

GNU Emacs A guide to packaging add-ons Presented by Arun S.A.G Package maintainer, Fedora project. GNU Free documentation License Emacs I am not going to lie, Emacs sucks! Some of us tolerate it, but i can't tell you if YOU'LL be able to.

684 views • 21 slides
Templates and Namespaces Visual Computing in OpenCV: Seminar 1 Hannes Ovrn Department of

Templates and Namespaces Visual Computing in OpenCV: Seminar 1 Hannes Ovrn Department of

Templates and Namespaces Visual Computing in OpenCV: Seminar 1 Hannes Ovrn Department of Electrical Engineering Computer Vision Laboratory Linkping University August 23, 2012 Outline 1. Namespaces Introduction Namespaces in your

346 views • 16 slides
Stefan Plantikow, Neo4j 2017 Stefan Plantikow, Neo4j 2 2017 Stefan Plantikow, Neo4j

Stefan Plantikow, Neo4j 2017 Stefan Plantikow, Neo4j 2 2017 Stefan Plantikow, Neo4j

Stefan Plantikow, Neo4j 2017 Stefan Plantikow, Neo4j 2 2017 Stefan Plantikow, Neo4j 2017 Stefan Plantikow, Neo4j 4 2017 Stefan Plantikow, Neo4j 5

914 views • 49 slides
HIGH SCHOOL MEDIA. VERSION 10.0 The student newspaper has long been a cherished tradition at

HIGH SCHOOL MEDIA. VERSION 10.0 The student newspaper has long been a cherished tradition at

HIGH SCHOOL DIGITAL NETWORK HIGH SCHOOL MEDIA. VERSION 10.0 The student newspaper has long been a cherished tradition at many of the nations top high schools, one that allowed students to take initiative and hone their writing skills

434 views • 10 slides

More recommend