NDLI: Deniable password snatching: on the possibility of evasive electronic espionage

Content Provider	IEEE Xplore Digital Library
Author	Young, A. Moti Yung
Copyright Year	1997
Description	Author affiliation: Dept. of Comput. Sci., Columbia Univ., New York, NY, USA (Young, A.)
Abstract	Cryptovirology has recently been introduced as a means of mounting active viral attacks using public key cryptography. It has been shown to be a tool for extortion attacks and "electronic warfare", where attacks are mounted against information resources. The natural question to ask is whether Cryptovirology is also useful in the area of spying via malware. We demonstrate that Cryptovirology does help in "electronic espionage" and allows the spy to conceal his or her identity (as well as past collected information). Specifically, we present an attack that can be mounted by a cryptotrojan that allows the attacker to gather information (passwords) from a system in such a way that the attacker cannot be proven guilty beyond reasonable doubt. That is, even if the attacker is under surveillance on the local machine from when he first attacks the target machine, to when he obtains the passwords, and even if the leaked information is made available to the attacker exclusively, he still cannot be caught. The threat is made possible by the combination of public key cryptography, probabilistic encryption, and the use of public information (I/O or communication) channels which together form a "secure receiver-anonymous channel". The machine can be standalone or networked. What we learn from the attack is extracted as general tools and basic principles for "espionage attacks".
Starting Page	224
Ending Page	235
File Size	1192089
Page Count	12
File Format	PDF
ISBN	0818678283
ISSN	10816011
DOI	10.1109/SECPRI.1997.601339
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	1997-05-04
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Public key cryptography Viruses (medical) Electronic warfare Computer crime Surveillance Information security Privacy Computer science Data mining Concrete
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Cryptovirology: Virus Approach

Sender-Side Public Key Deniable Encryption Scheme

ID-Based Non-interactive Deniable Authentication Protocol

Improvement upon Mutual Password Authentication Scheme

Secure Deniable Authentication Protocol Based on ElGamal Cryptography

A new password authentication and user anonymity scheme based on elliptic curve cryptography and smart card

Deniable Proxy-Anonymous Signatures

Password authentication based on public-key distribution cryptosystem

Block cipher based on reversible cellular automata

Deniable password snatching: on the possibility of evasive electronic espionage

Similar Documents

Cryptovirology: Virus Approach

Sender-Side Public Key Deniable Encryption Scheme

ID-Based Non-interactive Deniable Authentication Protocol

Improvement upon Mutual Password Authentication Scheme

Secure Deniable Authentication Protocol Based on ElGamal Cryptography

A new password authentication and user anonymity scheme based on elliptic curve cryptography and smart card

Deniable Proxy-Anonymous Signatures

Password authentication based on public-key distribution cryptosystem

Block cipher based on reversible cellular automata

Deniable password snatching: on the possibility of evasive electronic espionage