No abstract

No abstract

No abstract

Adaptive authentication is a risk-based authentication that identifies high-risk and suspicious illegitimate login attempts. User past login records which implicitly contains attribute factors context information are used to establish user behavior profile. Later if the user logins under different environmental context from that established profile, the identity of the user may be questioned. The system may challenge the user to present additional authentication method to get authenticated. We implemented such adaptive authentication system in our production server and collected user login records for more than six months. In this paper, we presents the analysis of the user login profile with regards to attribute factors such as geographical location and time of login. We also developed testbed system that uses the collected real data to evaluate the system for different ratio threshold values.

The paper presents the technology curves in developing a digital signature solution for the web environment. The solution enables a user to perform an electronic version of a digital signature using web extension technologies. On the quest for data integrity and authenticity, data is digitally signed, and a digital signature is generated with the assistance of software or hardware-based token on a web browser. The technology curves identified are (1) web extensions survivability and advancement, (2) web browsers compatibility, and (3) digital certificates issuance. The paper explains how these technology curves have impacted the decision on the architecture and design of the solution during the development and deployment. In the final, a digital signature ecosystem which is based on a client and server technology is successfully released, which includes a web signature script to simplify the digital signature as a service.