TY - GEN
T1 - Security analysis of secure password authentication for keystroke dynamics
AU - Song, Hyunsoo
AU - Kwon, Taekyoung
PY - 2006
Y1 - 2006
N2 - Password-based authentication and key distribution are important in today's computing environment. Since passwords are easy to remember for human users, the password-based system is used widely. However, due to the fact that the passwords are chosen from small space, the password-based schemes are more susceptible to various attacks including password guessing attacks. Recently, Choe and Kim proposed a new password authentication scheme for keystroke dynamics. However, in this paper, we cryptanalyze the Choe-Kim scheme and show it is vulnerable to various types of attacks such as server-deception attacks, server-impersonation attacks and password guessing attacks. We also comment on the scheme that more care must be taken when designing password-based schemes and briefly show how the standard like IEEE P1363.2 can be used for strengthening those schemes.
AB - Password-based authentication and key distribution are important in today's computing environment. Since passwords are easy to remember for human users, the password-based system is used widely. However, due to the fact that the passwords are chosen from small space, the password-based schemes are more susceptible to various attacks including password guessing attacks. Recently, Choe and Kim proposed a new password authentication scheme for keystroke dynamics. However, in this paper, we cryptanalyze the Choe-Kim scheme and show it is vulnerable to various types of attacks such as server-deception attacks, server-impersonation attacks and password guessing attacks. We also comment on the scheme that more care must be taken when designing password-based schemes and briefly show how the standard like IEEE P1363.2 can be used for strengthening those schemes.
UR - http://www.scopus.com/inward/record.url?scp=33750729209&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=33750729209&partnerID=8YFLogxK
U2 - 10.1007/11892960_110
DO - 10.1007/11892960_110
M3 - Conference contribution
AN - SCOPUS:33750729209
SN - 3540465359
SN - 9783540465355
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 916
EP - 923
BT - Knowledge-Based Intelligent Information and Engineering Systems - 10th International Conference, KES 2006, Proceedings
PB - Springer Verlag
T2 - 10th International Conference on Knowledge-Based Intelligent Information and Engineering Systems, KES 2006
Y2 - 9 October 2006 through 11 October 2006
ER -