A logic-based reasoner for discovering authentication vulnerabilities between interconnected accounts

File Description SizeFormat 
KarafiliSL18.pdfFile embargoed until 01 January 10000233.38 kBAdobe PDF    Request a copy
Title: A logic-based reasoner for discovering authentication vulnerabilities between interconnected accounts
Authors: Karafili, E
Sgandurra, D
Lupu, E
Item Type: Conference Paper
Abstract: With users being more reliant on online services for their daily activities, there is an increasing risk for them to be threatened by cyber-attacks harvesting their personal information or banking details. These attacks are often facilitated by the strong interconnectivity that exists between online accounts, in particular due to the presence of shared (e.g., replicated) pieces of user information across different accounts. In addition, a significant proportion of users employs pieces of information, e.g. used to recover access to an account, that are easily obtainable from their social networks accounts, and hence are vulnerable to correlation attacks, where a malicious attacker is either able to perform password reset attacks or take full control of user accounts. This paper proposes the use of verification techniques to analyse the possible vulnerabilities that arises from shared pieces of information among interconnected online accounts. Our primary contributions include a logic-based reasoner that is able to discover vulnerable online accounts, and a corresponding tool that provides modelling of user ac- counts, their interconnections, and vulnerabilities. Finally, the tool allows users to perform security checks of their online accounts and suggests possible countermeasures to reduce the risk of compromise.
Issue Date: 3-Sep-2018
Date of Acceptance: 27-Jul-2018
URI: http://hdl.handle.net/10044/1/63153
ISSN: 0302-9743
Publisher: Springer Verlag
Journal / Book Title: Lecture Notes in Computer Science
Copyright Statement: This paper is embargoed until publication.
Sponsor/Funder: Engineering & Physical Science Research Council (EPSRC)
Engineering & Physical Science Research Council (E
Commission of the European Communities
Funder's Grant Number: EP/L022729/1
Conference Name: 1st International Workshop on Emerging Technologies for Authorization and Authentication
Keywords: Logic-Based Reasoner
Logic Analyzer
Interconnected Accounts
08 Information And Computing Sciences
Artificial Intelligence & Image Processing
Publication Status: Accepted
Start Date: 2018-09-03
Conference Place: Barcelona, Spain
Embargo Date: publication subject to indefinite embargo
Appears in Collections:Faculty of Engineering

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.

Creative Commonsx