Authentication and Computer Security

身份验证和计算机安全

• 批准号: CRC-2015-00227
• 负责人: VanOorschot, Paul
• 金额: $ 14.57万
• 依托单位: Carleton University
• 依托单位国家: 加拿大
• 项目类别: Canada Research Chairs
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=695783
• 关键词: Authentication; Computer; Security

The research in the area of Internet authentication has three-fold focus: strengthening user authentication, improving authentication of web servers and underlying browser-server certificate framework, and exploring threats to password-based access. Directions include enhancing password authentication by additional signals without additional demands on users; strengthening the browser-server authentication infrastructure by improving or replacing mechanisms relying on third-party certificates with pre-configured browser trust; and better understanding differences between theoretical and real-world attacks. Goals include a better understanding of current weaknesses, including deployability and single points of failure, and new mechanisms improving integrity without unrealistic expectations of users. Broader questions are also explored.

Internet身份验证领域的研究具有三倍的重点：加强用户身份验证，改善Web服务器的身份验证和浏览器服务器证书框架，并探索对基于密码的访问的威胁。 说明包括通过其他信号增强密码身份验证，而无需对用户提出其他要求；通过改善或替换依靠预先配置的浏览器信任的第三方证书的机制来加强浏览器 - 服务器身份验证基础架构；并更好地理解理论和现实世界攻击之间的差异。 目标包括更好地了解当前弱点，包括可部署性和单点故障，以及在没有用户的不切实际期望的情况下改善完整性的新机制。 还探讨了更广泛的问题。