Abstract:A significant percentage of security research that is conducted suffers from common issues that prevent wide-scale adoption. Common snags of such proposed methods tend to include (i) introduction of additional nodes within the communication architecture, breaking the simplicity of the typical client-server model, or fundamental restructuring of the Internet ecosystem; (ii) significant inflation of responsibilities or duties for the user and/or server operator; and (iii) adding increased risks surrounding sensitive data during the authentication process. Many schemes seek to prevent brute-forcing attacks; they often ignore either partially or holistically the dangers of other cyber-attacks such as MiTM or replay attacks. Therefore, there is no incentive to implement such proposals, and it has become the norm instead to inflate current username/password authentication systems. These have remained standard within client-server authentication paradigms, despite insecurities stemming from poor user and server operator practices, and vulnerabilities to interception and masquerades. Besides these vulnerabilities, systems which revolve around secure authentication typically present exploits of two categories; either pitfalls which allow MiTM or replay attacks due to transmitting data for authentication constantly, or the storage of sensitive information leading to highly specific methods of data storage or facilitation, increasing chances of human error. This paper proposes a more secure method of authentication that retains the current structure of accepted paradigms, but minimizes vulnerabilities which result from the process, and does not inflate responsibilities for users or server operators. The proposed scheme uses a hybrid, layered encryption technique alongside a two-part verification process, and provides dynamic protection against interception-based cyber-attacks such as replay or MiTM attacks, without creating additional vulnerabilities for other attacks such as bruteforcing. Results show the proposed mechanism outperforms not only standardized methods, but also other schemes in terms of deployability, exploit resilience, and speed.

Implementing New-age Authentication Techniques using OpenID for Security Automation

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Evaluation of Secure OpenID-Based RAAA User Authentication Protocol for Preventing Specific Web Attacks in Web Apps

Dynamic Authentication with Sensory Information for the Access Control Systems.

Enhancing Room Security and Automating Class Attendance Using ID Cards

Defending Against Identity Threats Using Risk-Based Authentication

INTEGRATION OF APPLICATION LAYER SERVICES WITH CENTRAL AUTHENTICATION SERVER IN EXAMPLE OF HTTP AND FTP RESTRICTION

Automating the Assessment of Network Security in Higher Education

Advancements in ATM Security: A Biometric Approach for Fingerprint and Face Recognition Access Control System

A Dynamic ID-based Remote User Authentication Scheme

A Hybrid Dynamic Encryption Scheme for Multi-Factor Verification: A Novel Paradigm for Remote Authentication

Application of Multi factor authentication in Internet of Things domain

ISS: Intelligent Security System Using Facial Recognition

Improving Network Security by using Software Defined Networking (SDN)

E-Authentication System using QR Code and OTP

Applying Spring Security Framework with KeyCloak-Based OAuth2 to Protect Microservice Architecture APIs: A Case Study

A Review Analysis on Face Recognition System with User Interface System

An Identity-Based Authentication Framework for Big Data Security

A comprehensive approach for mitigating impersonation in online assessment: integrity policy and random authentication

A Novel Framework for Smart Classroom Lecture Attendance Management System (LAMS) using IOT

Authentication Based Remote System for the Interaction of Reservation Scheme of Cloud with IoT Networks