Security Testing of a User-Participating Authentication Scheme Implementation on Web-Based Login System

Tarumanagara International Conference on the Applications of Technology and Engineering

工业技术（总论）

Akmaluddin, Muhammad^1 ; Pramadiv, Yogha Restu^1

Laboratory of Cryptographic Software Engineering, Sekolah Tinggi Sandi Negara/National Crypto Institute, Indonesia^1

关键词: Authentication methods;    Authentication scheme;    Man-In-The-Middle (MITM) Attack;    On-line applications;    Security services;    Security testing;    User authentication;    User participation;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/508/1/012136/pdf
DOI  :  10.1088/1757-899X/508/1/012136

学科分类：工业工程学

来源: IOP

【 摘 要 】

Authentication is part of the security services. From a variety of authentication methods available today, there is one scheme named user-participation authentication scheme (UPA Scheme) which not only focusing on user authentication, also provide a guarantee of human participation in the authentication process. The scheme intended for authentication in online applications such as e-learning, online polls, online ticket-order system, and more. In this study, the implementation of UPA scheme and security testing has been completed. Testing was carried out using OWASP-AT-008 with the result that the UPA scheme had guaranteed human participation, besides it also found weaknesses in the UPA scheme against man-in-The-middle (MITM) attack.