000 04290nam a22005055i 4500
999 _c200434189
_d52401
003 DE-He213
005 20231104114323.0
007 cr nn 008mamaa
008 150423s2015 gw | s |||| 0|eng d
020 _a9783319175034
_z978-3-319-17503-4
024 7 _a10.1007/978-3-319-17503-4
_2doi
040 _aTR-AnTOB
_beng
_cTR-AnTOB
_erda
050 4 _aQA76.9.A25
072 7 _aUR
_2bicssc
072 7 _aCOM053000
_2bisacsh
072 7 _aUR
_2thema
072 7 _aUTN
_2thema005.8
_223
100 1 _aLi, Yingjiu.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
245 1 0 _aLeakage Resilient Password Systems /
_cby Yingjiu Li, Qiang Yan, Robert H. Deng.
264 1 _aCham :
_bSpringer International Publishing :
_bImprint: Springer,
_c2015.
300 _a1 online resource
336 _atext
_btxt
_2rdacontent
337 _acomputer
_bc
_2rdamedia
338 _aonline resource
_bcr
_2rdacarrier
347 _atext file
_bPDF
_2rda
490 0 _aSpringerBriefs in Computer Science,
_x2191-5768
505 0 _aLeakage Resilient Password Systems: Attacks, Principles and Usability -- Cover Pad: A Leakage Resilient Password System on Touch-Screen Mobile Devices -- Shadow Key: A Practical Leakage Resilient Password System.
520 _aThis book investigates tradeoff between security and usability in designing leakage resilient password systems (LRP) and introduces two practical LRP systems named Cover Pad and ShadowKey. It demonstrates that existing LRP systems are subject to both brute force attacks and statistical attacks and that these attacks cannot be effectively mitigated without sacrificing the usability of LRP systems. Quantitative analysis proves that a secure LRP system in practical settings imposes a considerable amount of cognitive workload unless certain secure channels are involved. The book introduces a secure and practical LRP system, named Cover Pad, for password entry on touch-screen mobile devices. Cover Pad leverages a temporary secure channel between a user and a touch screen which can be easily realized by placing a hand shielding gesture on the touch screen. The temporary secure channel is used to deliver a hidden message to the user for transforming each password symbol before entering it on the touch screen. A user study shows the impact of these testing conditions on the users' performance in practice. Finally, this book introduces a new LRP system named ShadowKey. Shadow Key is designed to achieve better usability for leakage resilient password entry. It leverages either a permanent secure channel, which naturally exists between a user and the display unit of certain mobile devices, or a temporary secure channel, which can be easily realized between a user and a touch screen with a hand-shielding gesture. The secure channel protects the mappings between original password symbols and associated random symbols. Unlike previous LRP system users, Shadow Key users do not need to remember anything except their passwords. Leakage Resilient Password Systems is designed for professionals working in the security industry. Advanced-level students studying computer science and electrical engineering will find this brief full of useful material.
650 0 _aComputer security.
650 0 _aInformation systems.
650 0 _aTelecommunication.
650 0 _aData encryption (Computer science).
650 1 4 _aSystems and Data Security.
_0http://scigraph.springernature.com/things/product-market-codes/I28060
650 2 4 _aInformation Systems and Communication Service.
_0http://scigraph.springernature.com/things/product-market-codes/I18008
650 2 4 _aCommunications Engineering, Networks.
_0http://scigraph.springernature.com/things/product-market-codes/T24035
650 2 4 _aCryptology.
_0http://scigraph.springernature.com/things/product-market-codes/I28020
700 1 _aYan, Qiang.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
700 1 _aDeng, Robert H.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
710 2 _aSpringerLink (Online service)
856 4 0 _uhttps://doi.org/10.1007/978-3-319-17503-4
_3Springer eBooks
_zOnline access link to the resource
942 _2lcc
_cEBK
041 _aeng