TY  - CONF
ID  - www2009152
UR  - http://www2009.eprints.org/152/
A1  - Oiwa, Yutaka
A1  - Takagi, Hiromitsu
A1  - Watanabe, Hajime
A1  - Suzuki, Hirofumi
Y1  - 2009/04//
N2  - We developed a new Web authentication protocol with passwordbased mutual authentication which prevents various kinds of phishing attacks. This protocol provides a protection of user?s passwords against any phishers even if a dictionary attack is employed, and prevents phishers from imitating a false sense of successful authentication to users. The protocol is designed considering interoperability with many recent Web applications which requires many features which current HTTP authentication does not provide. The protocol is proposed as an Internet Draft submitted to IETF, and implemented in both server side (as an Apache extension) and client side (as a Mozilla-based browser and an IE-based one). Categories and Subject Descriptors: K.6.5 [Management of Computing and Information Systems]: Security and Protection? Authentication General Terms: Security, Standardization. Keywords: Network protocol, Mutual authentication, HTTP.
TI  - PAKE-based Mutual HTTP Authentication for Preventing Phishing Attacks
SP  - 1143
M2  - Madrid, Spain
AV  - public
EP  - 1143
T2  - 18th International World Wide Web Conference
ER  -