Concepedia

SSL/TLS Session-Aware User Authentication

Computer · 2008 · 44 citations · 7 references

Concepts

Lightweight Authentication MechanismAuthentication AuthorizationEngineeringLayer SecurityInformation SecurityIdentity-based SecuritySession-aware User AuthenticationLegacy Authentication MechanismsAuthentication Access ControlAuthentication ProtocolData SecurityCryptography

Abstract

Overall, transport layer security with session-aware user authentication offers a promising approach to solving man-in-the-middle attack problems by leveraging the legacy authentication mechanisms and systems that the general public has become accustomed to using.

References

7

How to expose an eavesdropper

Ronald L. Rivest, Adi Shamir · Communications of the ACM · 1984 · 135 citations · Full text

SSL/TLS session-aware user authentication – Or how to effectively thwart the man-in-the-middle

Rolf Oppliger, Ralf Hauser, David Basin · Computer Communications · 2006 · 72 citations

Information Security, Identity-based Security, Authentication Access Control

Man-in-the-Middle in Tunneled Authentication Protocols

N. Asokan, Valtteri Niemi, Kaisa Nyberg · 2002 · 56 citations

Secure password-based cipher suite for TLS

Michael Steiner, Peter Bühler, Thomas Eirich et al. · ACM Transactions on Information and System Security · 2001 · 52 citations

Engineering, Information Security, Standard Today +17

An attack on the Interlock Protocol when used for authentication

Steven M. Bellovin, Michael Merritt · IEEE Transactions on Information Theory · 1994 · 43 citations · Full text

Engineering, Information Security, Cryptographic Protocol +23