loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
20th International Conference on Advanced Information Networking and Applications - Volume 1 (AINA'06)
On Compromising Password-Based Authentication over HTTPS
Vienna, Austria
April 18-April 20
ISBN: 0-7695-2466-4
Takamichi SAITO, Meiji University, JAPAN
Ryosuke HATSUGAI, Meiji University, JAPAN
Toshiyuki KIT0, Meiji University, JAPAN
SSL (Secure Socket Layer) is one of the security protocols to achieve secure communications over a TCP/IP network. SSL has two types of authentication modes, Server Authentication mode and Client Authentication mode. The former is popular and facile to utilize, while the latter is secure enough owing to mutual authentication. However, when it was required to identify a client or its user, Server Authentication mode can be utilized with Basic Authentication which is authentacation with password to achieve mutual authentication. In this paper, we discuss the compromising of authentication using the password-based authentication over SSL. And we show the countermeasures against the attaclcs.
Citation:
Takamichi SAITO, Ryosuke HATSUGAI, Toshiyuki KIT0, "On Compromising Password-Based Authentication over HTTPS," aina, vol. 1, pp.869-874, 20th International Conference on Advanced Information Networking and Applications - Volume 1 (AINA'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.