A hybrid authentication system for websites on mobile browsers

Dubey, Utkarsh; Trisal, Ankur; Bose, Joy; Brabhui, Mani; Ahamed, Nazeer

doi:10.1109/icacci.2014.6968605

“…Morii et al [8] proposed an integrated authentication system without the use of password, adopting Fast Identity Online (FIDO), as an external authentication technique. Dubey et al [9] proposed a hybrid model, where fingerprint authentication is used with autocomplete function for accessing a specific website or information on the website. In that method, when certain pre-configured rules are met, the fingerprint module is triggered automatically.…”

Section: Related Workmentioning

confidence: 99%

Applying MAC Address-Based Access Control for Securing Admin’s Login Page

Alam¹,

Septiasari²,

Amiruddin³

2019

EECSI

0

View full text Add to dashboard Cite

Authentication is a very important process for securing web applications. Username and password are two parameters commonly used for user authentication on the administrator's login page. However, such the two authentication parameters can be easily breached so that they can become a vulnerability that adversary parties can use to conduct malicious activities. For example, the attackers can commit a crime such as data modification or theft or even more dangerous take over administrator services of a system. Therefore, it is necessary to improve the security mechanism by adding additional factor of authentication other than username and password. In this study, an improvement in authentication mechanisms was carried out by applying MAC Address-based access control as an additional authentication factor. In this method, Address Resolution Protocol (ARP) is used in mapping the users Internet Protocol (IP) address to their MAC address during validation process. The experimental results showed that the addition of the MAC address made the authentication process resistant to Dictionary Attack and Shoulder Surfing Attack.

show abstract

“…Morii et al [8] proposed an integrated authentication system without the use of password, adopting Fast Identity Online (FIDO), as an external authentication technique. Dubey et al [9] proposed a hybrid model, where fingerprint authentication is used with autocomplete function for accessing a specific website or information on the website. In that method, when certain pre-configured rules are met, the fingerprint module is triggered automatically.…”

Section: Related Workmentioning

confidence: 99%

Applying MAC Address-Based Access Control for Securing Admin’s Login Page

Alam¹,

Septiasari²,

Amiruddin³

2019

EECSI

0

View full text Add to dashboard Cite

Authentication is a very important process for securing web applications. Username and password are two parameters commonly used for user authentication on the administrator's login page. However, such the two authentication parameters can be easily breached so that they can become a vulnerability that adversary parties can use to conduct malicious activities. For example, the attackers can commit a crime such as data modification or theft or even more dangerous take over administrator services of a system. Therefore, it is necessary to improve the security mechanism by adding additional factor of authentication other than username and password. In this study, an improvement in authentication mechanisms was carried out by applying MAC Address-based access control as an additional authentication factor. In this method, Address Resolution Protocol (ARP) is used in mapping the users Internet Protocol (IP) address to their MAC address during validation process. The experimental results showed that the addition of the MAC address made the authentication process resistant to Dictionary Attack and Shoulder Surfing Attack.

show abstract