Breaking undercover
Jul 20, 2011·
,,,,,
Toni Perković
Shujun Li
Asma Mumtaz
Syed Ali Khayam
Yousra Javed
Mario Čagalj
Abstract
This paper reports two attacks on Undercover, a human authentication scheme against passive observers proposed at CHI 2008. The first attack exploits nonuniform human behavior in responding to authentication challenges and the second one is based on information leaked from authentication challenges or responses visible to the attacker. The second attack can be generalized to break two alternative Undercover designs presented at Pervasive 2009. All the attacks exploit design flaws of the Undercover implementations.
Type
Publication
Symposium On Usable Privacy and Security, 1–15
Status
Peer-reviewed
Authors
Full Professor
I am a Full Professor in the
Department of Electronics and Computing
at the Faculty of Electrical Engineering, Mechanical Engineering and Naval
Architecture (FESB), University of Split,
Croatia, where I teach
wireless network security, wireless communication networks, data science and
reinforcement learning.
My research spans information security, applied cryptography and the Internet of
Things. Before returning to FESB in 2020, I was an assistant and then associate
professor at the University Department of Forensic Sciences
in Split. I co-founded the SpliTech international
conference and serve on the editorial board of the
Journal of Communications Software and Systems.