Export Citations
Publications
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- research-article
ROSTAM: A passwordless web single sign-on solution mitigating server breaches and integrating credential manager and federated identity systems
AbstractThe challenge of achieving passwordless user authentication is real given the prevalence of web applications that keep asking passwords. Complicating this issue further, in an enterprise environment, a single sign-on (SSO) service is often ...
Highlights- Introduces passwordless SSO with secure credential management.
- Enhances security and privacy with a client-side Master Key encryption scheme.
- Features novel Master Key sync and recovery techniques.
- Outperforms widely adopted ...
- research-article
Authentication-enabled attribute-based access control for smart homes
International Journal of Information Security, Volume 22, Issue 2•Apr 2023, pp 479-495 • https://doi.org/10.1007/s10207-022-00639-xAbstractSmart home technologies constantly bring significant convenience to our daily lives. Unfortunately, increased security risks accompany this convenience. There can be severe consequences when unauthorized or malicious users gain access to smart ...
- short-paper
Automated Generation of Attack Graphs Using NVD
CODASPY '18: Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy•March 2018, pp 135-142• https://doi.org/10.1145/3176258.3176339Today's computer networks are prone to sophisticated multi-step, multi-host attacks. Common approaches of identifying vulnerabilities and analyzing the security of such networks with naive methods such as counting the number of vulnerabilities, or ...
- research-article
Leveraging human computation for pure-text Human Interaction Proofs
International Journal of Human-Computer Studies, Volume 92, Issue C•August 2016, pp 44-54 • https://doi.org/10.1016/j.ijhcs.2016.04.007Even though purely text-based Human Interaction Proofs (HIPs) have desirable usability and accessibility attributes; they could not overcome the security problems yet. Given the fact that fully automated techniques to generate pure-text HIPs securely do ...
- research-article
Maximizing Wireless Sensor Network lifetime by communication/computation energy optimization of non-repudiation security service
Ad Hoc Networks, Volume 37, Issue P2•February 2016, pp 301-323 • https://doi.org/10.1016/j.adhoc.2015.08.026In a typical Wireless Sensor Network (WSN) application, the basic communication service is the transportation of the data collected from sensors to the base station. For prolonging the network lifetime, energy efficiency should be one of the primary ...
- Article
Towards making accessible human-interaction proofs more secure and usable
ISCC '15: Proceedings of the 2015 IEEE Symposium on Computers and Communication (ISCC)•July 2015, pp 607-612• https://doi.org/10.1109/ISCC.2015.7405581Human-Interaction Proof (HIP) systems are widely used to prevent malicious acts of abusers. Legitimate users, however, are not satisfied with their ease of use. The response of Google to the complaints of difficulty in solving audio reCAPTCHAs was to ...
- research-article
Evaluating energy cost of route diversity for security in wireless sensor networks
Computer Standards & Interfaces, Volume 39, Issue C•March 2015, pp 44-57 • https://doi.org/10.1016/j.csi.2014.12.003Route diversity improves the security of Wireless Sensor Networks (WSNs) against adversaries attempting to obtain sensitive sensor data. By limiting the fraction of data relayed over each link and/or routed through each relay node, route diversity can ...
- research-article
Effects of node mobility on energy balancing in wireless networks
Computers and Electrical Engineering, Volume 41, Issue C•January 2015, pp 314-324 • https://doi.org/10.1016/j.compeleceng.2014.05.015Display Omitted Utilizing mobility for energy balancing is the key insight of our work.We construct a Linear Programming (LP) framework that jointly captures data routing, mobility, and energy dissipation aspects.Mobility can improve the energy ...
- research-article
The Impact of Transmission Power Control Strategies on Lifetime of Wireless Sensor Networks
IEEE Transactions on Computers, Volume 63, Issue 11•November 2014, pp 2866-2879 • https://doi.org/10.1109/TC.2013.151Transmission power control has paramount importance in the design of energy-efficient wireless sensor networks (WSNs). In this paper, we systematically explore the effects of various transmission power control strategies on WSN lifetime with an emphasis ...
- Article
Mobile Authentication Secure against Man-in-the-Middle Attacks
MOBILECLOUD '14: Proceedings of the 2014 2nd IEEE International Conference on Mobile Cloud Computing, Services, and Engineering•April 2014, pp 273-276• https://doi.org/10.1109/MobileCloud.2014.43Current mobile authentication solutions puts a cognitive burden on users to detect and avoid Man-In-The-Middle attacks. In this paper, we present a mobile authentication protocol named Mobile-ID which prevents Man-In-The-Middle attacks without relying ...
- research-article
Revisiting graphical passwords for augmenting, not replacing, text passwords
ACSAC '13: Proceedings of the 29th Annual Computer Security Applications Conference•December 2013, pp 119-128• https://doi.org/10.1145/2523649.2523672Users generally choose weak passwords which can be easily guessed. On the other hand, adoption of alternatives to text passwords has been slow due to cost and usability factors. We acknowledge that incumbent passwords remain difficult to beat and ...
- research-article
LAKE: A Server-Side Authenticated Key-Establishment with Low Computational Workload
ACM Transactions on Internet Technology, Volume 13, Issue 2•December 2013, Article No.: 5, pp 1-27 • https://doi.org/10.1145/2542214.2542216Server-side authenticated key-establishment protocols are characterized by placing a heavy workload on the server. We propose LAKE: a new protocol that enables amortizing servers’ workload peaks by moving most of the computational burden to the clients. ...
- article
Neighbor sensor networks: Increasing lifetime and eliminating partitioning through cooperation
Computer Standards & Interfaces, Volume 35, Issue 4•June, 2013, pp 396-402 • https://doi.org/10.1016/j.csi.2012.11.001In this paper we consider neighbor sensor networks which are defined as multiple wireless sensor networks under the administration of different authorities but located physically on the same area or close to each other. We construct a Linear Programming ...
- Article
Uncovering the Impact of Minimum-Energy Routing on Lifetime of Wireless Sensor Networks
DCOSS '13: Proceedings of the 2013 IEEE International Conference on Distributed Computing in Sensor Systems•May 2013, pp 436-441• https://doi.org/10.1109/DCOSS.2013.43It is well-known that in wireless sensor networks using minimum-energy paths to transfer data from sensor nodes to base station is not an energy-balancing option and not the optimal solution if lifetime, defined as the duration till the first node in ...
- article
A survey of visual sensor network platforms
Multimedia Tools and Applications, Volume 60, Issue 3•October 2012, pp 689-726 • https://doi.org/10.1007/s11042-011-0840-zRecent developments in low-cost CMOS cameras have created the opportunity of bringing imaging capabilities to sensor networks. Various visual sensor platforms have been developed with the aim of integrating visual data to wireless sensor applications. ...
- article
A second look at the performance of neural networks for keystroke dynamics using a publicly available dataset
Computers and Security, Volume 31, Issue 5•July, 2012, pp 717-726 • https://doi.org/10.1016/j.cose.2012.04.002Keystroke Dynamics, which is a biometric characteristic that depends on typing style of users, could be a viable alternative or a complementary technique for user authentication if tolerable error rates are achieved. Most of the earlier studies on ...
- article
Communication/computation tradeoffs for prolonging network lifetime in wireless sensor networks: The case of digital signatures
Information Sciences: an International Journal, Volume 188•April, 2012, pp 44-63 • https://doi.org/10.1016/j.ins.2011.11.018In the context of wireless sensor networks, computation/communication tradeoffs may appear in many aspects of the system design. In this paper, we present a linear programming framework to guide designers in effectively using these tradeoffs for ...
- research-article
Johnny in internet café: user study and exploration of password autocomplete in web browsers
DIM '11: Proceedings of the 7th ACM workshop on Digital identity management•October 2011, pp 33-42• https://doi.org/10.1145/2046642.2046652One of the most popular aids adopted by users to reduce the pain suffered from the use of passwords is browsers' autocomplete feature. This feature, caching username and password after getting the user consent and using them later for automatic ...
- research-article
A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation
NSPW '11: Proceedings of the 2011 New Security Paradigms Workshop•September 2011, pp 25-36• https://doi.org/10.1145/2073276.2073280Our agenda is two-fold. First, we introduce and give a technical description of gridWord, a novel knowledge-based authentication mechanism involving elements of both text and graphical passwords. It is intended to address a new research challenge ...
- article
Maximizing lifetime of event-unobservable wireless sensor networks
Computer Standards & Interfaces, Volume 33, Issue 4•June, 2011, pp 401-410 • https://doi.org/10.1016/j.csi.2011.01.001In wireless sensor networks (WSNs) contextual information such as the information regarding whether, when, and where the data is collected cannot be protected using only traditional measures (e.g., encryption). Contextual information can be protected ...
