Defense Against Man-in-the-Middle Attack in Client-Server Systems with Secure Servers
Summary :
Digital rights management in client-server environments requires the establishment of client integrity, in order to protect sensitive (secret) information from loss or misuse. Clients are vulnerable to powerful man-in-the-middle attacks through malicious software (viruses, etc.), which is undetectable by conventional anti-virus technology. We present such powerful viruses and demonstrate their ability to compromise clients. Furthermore, we introduce a defense against all viruses, which is based on simple hardware devices that execute specialized protocols to establish client integrity and protect against sensitive data loss.
- Publication
- IEICE TRANSACTIONS on Communications Vol.E86-B No.10 pp.2966-2970
- Publication Date
- 2003/10/01
- Publicized
- Online ISSN
- DOI
- Type of Manuscript
- Special Section LETTER (IEICE/IEEE Joint Special Issue on Assurance Systems and Networks)
- Category
Authors
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Dimitrios N. SERPANOS, Richard J. LIPTON, "Defense Against Man-in-the-Middle Attack in Client-Server Systems with Secure Servers" in IEICE TRANSACTIONS on Communications,
vol. E86-B, no. 10, pp. 2966-2970, October 2003, doi: .
Abstract: Digital rights management in client-server environments requires the establishment of client integrity, in order to protect sensitive (secret) information from loss or misuse. Clients are vulnerable to powerful man-in-the-middle attacks through malicious software (viruses, etc.), which is undetectable by conventional anti-virus technology. We present such powerful viruses and demonstrate their ability to compromise clients. Furthermore, we introduce a defense against all viruses, which is based on simple hardware devices that execute specialized protocols to establish client integrity and protect against sensitive data loss.
URL: https://global.ieice.org/en_transactions/communications/10.1587/e86-b_10_2966/_p
Copy
@ARTICLE{e86-b_10_2966,
author={Dimitrios N. SERPANOS, Richard J. LIPTON, },
journal={IEICE TRANSACTIONS on Communications},
title={Defense Against Man-in-the-Middle Attack in Client-Server Systems with Secure Servers},
year={2003},
volume={E86-B},
number={10},
pages={2966-2970},
abstract={Digital rights management in client-server environments requires the establishment of client integrity, in order to protect sensitive (secret) information from loss or misuse. Clients are vulnerable to powerful man-in-the-middle attacks through malicious software (viruses, etc.), which is undetectable by conventional anti-virus technology. We present such powerful viruses and demonstrate their ability to compromise clients. Furthermore, we introduce a defense against all viruses, which is based on simple hardware devices that execute specialized protocols to establish client integrity and protect against sensitive data loss.},
keywords={},
doi={},
ISSN={},
month={October},}
Copy
TY - JOUR
TI - Defense Against Man-in-the-Middle Attack in Client-Server Systems with Secure Servers
T2 - IEICE TRANSACTIONS on Communications
SP - 2966
EP - 2970
AU - Dimitrios N. SERPANOS
AU - Richard J. LIPTON
PY - 2003
DO -
JO - IEICE TRANSACTIONS on Communications
SN -
VL - E86-B
IS - 10
JA - IEICE TRANSACTIONS on Communications
Y1 - October 2003
AB - Digital rights management in client-server environments requires the establishment of client integrity, in order to protect sensitive (secret) information from loss or misuse. Clients are vulnerable to powerful man-in-the-middle attacks through malicious software (viruses, etc.), which is undetectable by conventional anti-virus technology. We present such powerful viruses and demonstrate their ability to compromise clients. Furthermore, we introduce a defense against all viruses, which is based on simple hardware devices that execute specialized protocols to establish client integrity and protect against sensitive data loss.
ER -
English
