The aim of this study is to protect an electronic mail (email) server system based on an integrated Entropy calculation via detecting flooding attacks. Lots of approaches have been proposed by many researchers to detect packets accessing email whether are belonging to the normal or abnormal packets. Entropy is an approach of the mathematical theory of Communication; it can be used to measure the uncertainty or randomness in a random variable. A normal email server usually supports the four protocols consists of Simple Mail Transfer Protocol (SMTP), Post Office Protocol version 3 (POP3), Internet Message Access Protocol version 4 (IMAP4), and HTTPS being used by remote web-based email. However, in Internet, there are many flooding attacks will try to paralyze email server system. Therefore, we propose a new approach for detecting flooding attack based on Integrated Entropy Measurement in email server. Our approach can reduce the misjudge rate compared to conventional approaches.

In recent years, many mobile services have been exploited based on the smartphone platform. For example, huge mobile applications (APPs) created for the mobile communication services which are not only for voice services, but also for social networking services. Therefore, the Mobile Chat (MC) services plays a very important role in current social networking. With the increasingly growing reliance on the Mobile Chat System (MCS) in one hand, and the growing number of vulnerabilities and attacks on the other hand, there are lots of increasing demands for their security solutions. In spite of the critical role of MCS in the representative internet mobile user's life, electronic MC services are not secure enough. Thus, both the Secure End-to-End Secure Mobile Chat (SE2E-MC) scheme and Secure Group-based Mobile Chat (SG-MC) scheme are provided the suitable solutions. The SG-MC scheme and its associated requirements are also designed in this paper. The scheme is implemented to provide mutual authentication and prevent the password guessing attack and the undetectable on-line password guessing attack. Finally, the scheme could prevent the password-based authentication, and provide the passwordbased key agreement (AKA) with easily remembered characteristic.

No abstract

No abstract