Man-In-The-Middle Attack against Certain Authentication Protocols Revisited: Insights into the Approach and Performances Re-Evaluation

Knezevic, Milica Jeremic; Tomović, Siniša; Mihaljević, Miodrag J.

doi:10.3390/electronics9081296

Cited by 6 publications

(2 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is the major target of hackers since it involves transmitting sensitive information. Hackers prey on businesses and organizations, causing enormous financial damage [10]. The MITM attacks are the most effective method of controlling sensitive end-user information being sent.…”

Section: A Backgroundmentioning

confidence: 99%

Encryption Algorithms Modeling in Detecting Man in the Middle Attack in Medical Organizations

Alnasser¹,

Alsaqour²

2022

IJACSA

View full text Add to dashboard Cite

A cyberattack is a serious crime that could affect medical organizations. These attacks could affect medical organization sensitive data disclosure, loss of organization data, or the business's continuity. The Man-in-The-Middle (MITM) attack is one of the threats that could impact medical organizations. It happens when unapproved outsiders break into the traffic between two parties that think they are conversing directly. At the same time, the adversary can access, read, and change secret information. Because of that, medical organizations lose confidentiality, integrity, and availability. Data encryption is a solution that changes vital information to unreadable by unauthorized and unintended parties. It could involve protecting data with cryptography, usually by leveraging a scrambled code. Only the individuals with the decoding key can read the information. There is no full protection due to the variety of MITM attacks. Each encryption algorithm has its advantages and disadvantages, like the speed of encryption and decryption, strength of the algorithm, and the cipher type. This research investigates the MITM attacks and comprehensively compares the Rivest Shamir Adleman algorithm and the Elliptic Curve Cryptography algorithm.

show abstract

Section: A Backgroundmentioning

confidence: 99%

Encryption Algorithms Modeling in Detecting Man in the Middle Attack in Medical Organizations

Alnasser¹,

Alsaqour²

2022

IJACSA

View full text Add to dashboard Cite

show abstract

“…In such scenarios tracing down the culprit is also difficult [7]. There are various security and privacy challenges [8][9][10] with the traditional authentication systems and a highly secure authentication system is required [11]. The limitations of the traditional frameworks can be overcome by using biometrics, which is based on biometric traits of a human [12,13].…”

Section: Introductionmentioning

confidence: 99%

Optimized Authentication System with High Security and Privacy

et al. 2021

View full text Add to dashboard Cite

Authentication and privacy play an important role in the present electronic world. Biometrics and especially fingerprint-based authentication are extremely useful for unlocking doors, mobile phones, etc. Fingerprint biometrics usually store the attributes of the minutia point of a fingerprint directly in the database as a user template. Existing research works have shown that from such insecure user templates, original fingerprints can be constructed. If the database gets compromised, the attacker may construct the fingerprint of a user, which is a serious security and privacy issue. Security of original fingerprints is therefore extremely important. Ali et al. have designed a system for secure fingerprint biometrics; however, their technique has various limitations and is not optimized. In this paper, first we have proposed a secure technique which is highly robust, optimized, and fast. Secondly, unlike most of the fingerprint biometrics apart from the minutiae point location and orientation, we have used the quality of minutiae points as well to construct an optimized template. Third, the template constructed is in 3D shell shape. We have rigorously evaluated the technique on nine different fingerprint databases. The obtained results from the experiments are highly promising and show the effectiveness of the technique.

show abstract

E-Banking Security Study—10 Years Later

et al. 2022

View full text Add to dashboard Cite

ICT security in the banking area is going through rapid changes. It is ten years since we covered the state of e-banking security, and both authentication schemes and legislation has evolved. With the Payment Services Directive (PSD2) for European Union coming into force, we believe it is a good time to update our findings. PSD2 brings new requirements for multi-factor authentication, thus it is necessary to revise compliance of currently used schemes. This work's main contribution is an overview of current authentication methods, their properties with respect to international standards, and their resistance against attacks. We further discuss the multi-factor authentication schemes composed of those methods and their compliance with the PSD2 requirements. In order to present the overview, we introduced the e-banking attacks taxonomy, which is compatible with authenticator threats from NIST Digital Identity Guidelines but has an increased level of detail with respect to the e-banking area. The available sources in this area are usually either very broad, targeted on the business executive, or focus on one particular issue or attack in greater detail. We believe our article can bridge such diverse sources by providing a comprehensive and complex tool to help with orientation in the area.

show abstract

Man-In-The-Middle Attack against Certain Authentication Protocols Revisited: Insights into the Approach and Performances Re-Evaluation

Cited by 6 publications

References 27 publications

Encryption Algorithms Modeling in Detecting Man in the Middle Attack in Medical Organizations

Encryption Algorithms Modeling in Detecting Man in the Middle Attack in Medical Organizations

Optimized Authentication System with High Security and Privacy

E-Banking Security Study—10 Years Later

Contact Info

Product

Resources

About