New Authentication Scheme to Secure against the Phishing Attack in the Mobile Cloud Computing

Abstract

A phishing attack is one of the severe threats to the smartphone users. As per the recent lookout report, mobile phishing attack is increasing 85% year to year and going to become a significant threat to the smartphone users. This social engineering attack attempts to get the user’s password by disguising as trusted service provider. Most of the smartphone users are using the Internet services outside of the traditional firewall. Cloud-based documents are one of the primary targets of this phishing attack in mobile cloud computing. Also, most smartphone users are using the cloud storage in their device. To secure against this password attack in a mobile cloud environment, we propose a new authentication scheme to provide novel security to the mobile cloud services. This scheme will verify the user and service provider without transmitting the password using the Zero-knowledge proof based authentication protocol. Moreover, the proposed scheme will provide mutual authentication between the communication entities. The effectiveness of proposed scheme would be verified using protocol verification tool called Scyther.

Review of Authentication Communication Protocols in Mobile(Vehicular) Network via FOG Computing

“…• Phishing attack : It is a social engineering attack where an attacker is disguised trusted service provider, tries to steal confidential data like passwords, credit card numbers by tempting the recipient to click the malicious link and that clicking leads to the installation of malware [43][44].…”

Protecting Data on Mobile Cloud Computing

“…III) Security between cloud network infrastructure and third-party authentication server. I) [6] In Mobile Cloud Computing, mobile devices i.e user equipment(UE) must be authenticated and registered to a cloud server to avoid the phishing attack on user communication between a mobile device and cloud server. We know that mobile devices are having IMSI (International Mobile Scriber Identity i.e.…”