Threat Modelling in User Performed Authentication

TY - GEN

T1 - Threat Modelling in User Performed Authentication

AU - Dong, Xun

AU - Clark, John A.

AU - Jacob, Jeremy L.

PY - 2008

Y1 - 2008

N2 - User authentication can be compromised both by subverting the system and by subverting the user; the threat modelling of the former is well studied, the latter less so. We propose a method to determine opportunities to subvert the user allowing vulnerabilities to be systematically identified. The method is applied to VeriSign's OpenID authentication mechanism.

AB - User authentication can be compromised both by subverting the system and by subverting the user; the threat modelling of the former is well studied, the latter less so. We propose a method to determine opportunities to subvert the user allowing vulnerabilities to be systematically identified. The method is applied to VeriSign's OpenID authentication mechanism.

UR - http://www.scopus.com/inward/record.url?scp=57049164284&partnerID=8YFLogxK

U2 - 10.1007/978-3-540-88625-9_4

DO - 10.1007/978-3-540-88625-9_4

M3 - Conference contribution

SN - 978-3-540-88624-2

VL - 5308 LNCS

SP - 49

EP - 64

BT - INFORMATION AND COMMUNICATIONS SECURITY, PROCEEDINGS

A2 - Chen, L

A2 - Ryan, MD

A2 - Wang, G

PB - Springer

CY - BERLIN

T2 - 10th International Conference on Information and Communications Security

Y2 - 20 October 2008 through 22 October 2008

ER -