Attacks and defenses in user authentication systems: A survey

Wang, Xuerui; Yan, Zheng; Zhang, Rui; Zhang, Peng

doi:10.1016/j.jnca.2021.103080

Cited by 59 publications

(46 citation statements)

References 151 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It indicates that every two attempts will succeed in breaking through the authentication system. It makes our attack more realistic than the existing works as a real-world authentication system usually allows three attempts [43]. We also find almost no difference in the FARs of the mean-treated rPPG signal for the three states, indicating that the mean-treatment reduces the influence noise on the signal.…”

Section: Attack Success Rates In Different Statesmentioning

confidence: 75%

Video is All You Need: Attacking PPG-based Biometric Authentication

Li¹,

Chen²,

Pan³

et al. 2022

Preprint

View full text Add to dashboard Cite

Unobservable physiological signals enhance biometric authentication systems. Photoplethysmography (PPG) signals are convenient owning to its ease of measurement and are usually well protected against remote adversaries in authentication. Any leaked PPG signals help adversaries compromise the biometric authentication systems, and the advent of remote PPG (rPPG) enables adversaries to acquire PPG signals through restoration. While potentially dangerous, rPPG-based attacks are overlooked because existing methods require the victim's PPG signals. This paper proposes a novel spoofing attack approach that uses the waveforms of rPPG signals extracted from video clips to fool the PPG-based biometric authentication. We develop a new PPG restoration model that does not require leaked PPG signals for adversarial attacks. Test results on state-of-art PPG-based biometric authentication show that the signals recovered through rPPG pose a severe threat to PPG-based biometric authentication.

show abstract

Section: Attack Success Rates In Different Statesmentioning

confidence: 75%

Video is All You Need: Attacking PPG-based Biometric Authentication

Li¹,

Chen²,

Pan³

et al. 2022

Preprint

View full text Add to dashboard Cite

show abstract

“…This means that all unused ports should be closed and only allow one that is secure and needed to communicate with other devices to be left open. In the case of brute-force attacks, one such method that is mentioned by both Kirushnaamoni [66] and Wang et al [67] are implementing the use of account locking in sessions. This is where password insertion for authentication is given a limited number of times.…”

Section: Prevention and Mitigation Strategiesmentioning

confidence: 99%

A Survey on Botnets, Issues, Threats, Methods, Detection and Prevention

Owen

Zarrin

Pour

2022

JCP

View full text Add to dashboard Cite

Botnets have become increasingly common and progressively dangerous to both business and domestic networks alike. Due to the Covid-19 pandemic, a large quantity of the population has been performing corporate activities from their homes. This leads to speculation that most computer users and employees working remotely do not have proper defences against botnets, resulting in botnet infection propagating to other devices connected to the target network. Consequently, not only did botnet infection occur within the target user’s machine but also neighbouring devices. The focus of this paper is to review and investigate current state of the art and research works for both methods of infection, such as how a botnet could penetrate a system or network directly or indirectly, and standard detection strategies that had been used in the past. Furthermore, we investigate the capabilities of Artificial Intelligence (AI) to create innovative approaches for botnet detection to enable making predictions as to whether there are botnets present within a network. The paper also discusses methods that threat-actors may be used to infect target devices with botnet code. Machine learning algorithms are examined to determine how they may be used to assist AI-based detection and what advantages and disadvantages they would have to compare the most suitable algorithm businesses could use. Finally, current botnet prevention and countermeasures are discussed to determine how botnets can be prevented from corporate and domestic networks and ensure that future attacks can be prevented.

show abstract

“…Graphical passwords are introduced to mitigate some vulnerabilities in text-based passwords. This method is resistant to attacks such as dictionary attacks because of its large password space [ 13 ].…”

Section: Introductionmentioning

confidence: 99%

Securing Fog Computing with a Decentralised User Authentication Approach Based on Blockchain

Umoren

Singh

Pervez

et al. 2022

Sensors

View full text Add to dashboard Cite

The use of low-cost sensors in IoT over high-cost devices has been considered less expensive. However, these low-cost sensors have their own limitations such as the accuracy, quality, and reliability of the data collected. Fog computing offers solutions to those limitations; nevertheless, owning to its intrinsic distributed architecture, it faces challenges in the form of security of fog devices, secure authentication and privacy. Blockchain technology has been utilised to offer solutions for the authentication and security challenges in fog systems. This paper proposes an authentication system that utilises the characteristics and advantages of blockchain and smart contracts to authenticate users securely. The implemented system uses the email address, username, Ethereum address, password and data from a biometric reader to register and authenticate users. Experiments showed that the proposed method is secure and achieved performance improvement when compared to existing methods. The comparison of results with state-of-the-art showed that the proposed authentication system consumed up to 30% fewer resources in transaction and execution cost; however, there was an increase of up to 30% in miner fees.

show abstract

Attacks and defenses in user authentication systems: A survey

Cited by 59 publications

References 151 publications

Video is All You Need: Attacking PPG-based Biometric Authentication

Video is All You Need: Attacking PPG-based Biometric Authentication

A Survey on Botnets, Issues, Threats, Methods, Detection and Prevention

Securing Fog Computing with a Decentralised User Authentication Approach Based on Blockchain

Contact Info

Product

Resources

About