The research on secure sensor networks in the context of a high-level cloud based brokering archi... more The research on secure sensor networks in the context of a high-level cloud based brokering architecture and highlighted various research challenges going forward. We outline research challenges associated with assessing the trustworthiness of the sensors based on environmental sensor data, detecting and defending against "sensory malware" on such sensors, and mitigating side channel leaks when sensor devices communicate with the cloud. We believe these components of the overall cloud based sensor network architecture are the least trustworthy since they are out of the control of the cloud "back end." Thus, addressing these challenges will help protect the integrity of the sensing platforms, the privacy of users who carry mobile sensors, as well as the delivery of sensor data to the cloud. These protections will greatly contribute to trustworthy collection of sensor data from smart and mobile sensing devices. We aim to secure smart sensor networks, where computationally powerful sensing devices such as smart phones or cognitive radios interact with the cloud. In previous work, it was seen that a large-scale brokering frame work, and people are researching several facets of securing sensors in the context of this framework. In this paper we discuss initial results for three portions of this effort, challenges that remain for secure sensor networks, and specific directions we are currently pursuing. We propose a model for large-scale smart phone based sensor networks, with sensor information processed b y clouds and grids, with a mediation layer for processing, filtering and other mash-ups done via a brokering network. Final aggregate results are assumed to be sent to users through traditional cloud interfaces such as browsers. We conjecture that such a network configuration will have significant sensing applications, and perform some preliminary work in both defining the system, and considering threats to the system as a whole from different perspectives. We then discuss our current, initial approaches to solving three portions of the overall security architecture: i) Risk Analysis relating to the possession and environment of the smart phone sensors, ii) New malware threats and defenses installed on the sensor network proper, and iii) An analysis of covert channels being used to circumvent encryption in the user/cloud interface.
We propose and examine the usability and security of Cued Click Points (CCP), a cued-recall graph... more We propose and examine the usability and security of Cued Click Points (CCP), a cued-recall graphical password technique. Users click on one point per image for a sequence of images. The next image is based on the previous click-point. We present the results of an initial user study which revealed positive results. Performance was very good in terms of speed, accuracy, and number of errors. Users preferred CCP to PassPoints (Wiedenbeck et al., 2005), saying that selecting and remembering only one point per image was easier, and that seeing each image triggered their memory of where the corresponding point was located. We also suggest that CCP provides greater security than PassPoints because the number of images increases the workload for attackers.
Authentication is the first line of defense against compromising confidentiality and integrity. T... more Authentication is the first line of defense against compromising confidentiality and integrity. Though traditional login/password based schemes are easy to implement, they have been subjected to several attacks. As an alternative, token and biometric based authentication systems were introduced. However, they have not improved substantially to justify the investment. Thus, a variation to the login/password scheme, viz. graphical scheme was introduced. But it also suffered due to shoulder-surfing and screen dump attacks. In this paper, we introduce a framework of our proposed (IPAS) Implicit Password Authentication System, which is immune to the common attacks suffered by other authentication schemes.
The research on secure sensor networks in the context of a high-level cloud based brokering archi... more The research on secure sensor networks in the context of a high-level cloud based brokering architecture and highlighted various research challenges going forward. We outline research challenges associated with assessing the trustworthiness of the sensors based on environmental sensor data, detecting and defending against "sensory malware" on such sensors, and mitigating side channel leaks when sensor devices communicate with the cloud. We believe these components of the overall cloud based sensor network architecture are the least trustworthy since they are out of the control of the cloud "back end." Thus, addressing these challenges will help protect the integrity of the sensing platforms, the privacy of users who carry mobile sensors, as well as the delivery of sensor data to the cloud. These protections will greatly contribute to trustworthy collection of sensor data from smart and mobile sensing devices. We aim to secure smart sensor networks, where computationally powerful sensing devices such as smart phones or cognitive radios interact with the cloud. In previous work, it was seen that a large-scale brokering frame work, and people are researching several facets of securing sensors in the context of this framework. In this paper we discuss initial results for three portions of this effort, challenges that remain for secure sensor networks, and specific directions we are currently pursuing. We propose a model for large-scale smart phone based sensor networks, with sensor information processed b y clouds and grids, with a mediation layer for processing, filtering and other mash-ups done via a brokering network. Final aggregate results are assumed to be sent to users through traditional cloud interfaces such as browsers. We conjecture that such a network configuration will have significant sensing applications, and perform some preliminary work in both defining the system, and considering threats to the system as a whole from different perspectives. We then discuss our current, initial approaches to solving three portions of the overall security architecture: i) Risk Analysis relating to the possession and environment of the smart phone sensors, ii) New malware threats and defenses installed on the sensor network proper, and iii) An analysis of covert channels being used to circumvent encryption in the user/cloud interface.
We propose and examine the usability and security of Cued Click Points (CCP), a cued-recall graph... more We propose and examine the usability and security of Cued Click Points (CCP), a cued-recall graphical password technique. Users click on one point per image for a sequence of images. The next image is based on the previous click-point. We present the results of an initial user study which revealed positive results. Performance was very good in terms of speed, accuracy, and number of errors. Users preferred CCP to PassPoints (Wiedenbeck et al., 2005), saying that selecting and remembering only one point per image was easier, and that seeing each image triggered their memory of where the corresponding point was located. We also suggest that CCP provides greater security than PassPoints because the number of images increases the workload for attackers.
Authentication is the first line of defense against compromising confidentiality and integrity. T... more Authentication is the first line of defense against compromising confidentiality and integrity. Though traditional login/password based schemes are easy to implement, they have been subjected to several attacks. As an alternative, token and biometric based authentication systems were introduced. However, they have not improved substantially to justify the investment. Thus, a variation to the login/password scheme, viz. graphical scheme was introduced. But it also suffered due to shoulder-surfing and screen dump attacks. In this paper, we introduce a framework of our proposed (IPAS) Implicit Password Authentication System, which is immune to the common attacks suffered by other authentication schemes.
Uploads
Papers by Harsha Haridas