NDLI: Robust and fast authentication of session cookies in collaborative and social media using position-indexed hashing

Content Provider	IEEE Xplore Digital Library
Author	Alabrah, A. Bassiouni, M.
Copyright Year	2013
Description	Author affiliation: Dept. of Electr. Eng. & Comput. Sci., Univ. of Central Florida, Orlando, FL, USA (Alabrah, A.; Bassiouni, M.)
Abstract	The use of insecure cookies as a means to authenticate web transactions in collaborative and social media websites presents a hazard to users' privacy. In this paper, we propose and evaluate a novel protocol for protecting transmitted cookies using two dimensional one-way hash chains. In the first dimension, there is a hash chain that computes secret values used in the second dimension hash function. Multiple hash chains use the secret values created by the first dimension to authenticate session cookies in the second dimension. For improved security, the hashing operations in the second dimension use a concatenation of the secret values and the position index of the hash function within the hash chain. The performance of the scheme is evaluated using a detailed simulation testbed and an analytical model. The optimal lengths of the chains are derived when the number of transactions in the session is known. The protocol is extended to efficiently handle the case when the number of transactions is not known. The evaluation of the proposed scheme reveals that it achieves tremendous improvement over straightforwardly configured one-way hash chain schemes. Also, by adopting the position-indexed hashing protocol, energy consumption is reduced significantly especially with longer sessions making our protocol ideal for battery operated devices.
Starting Page	241
Ending Page	249
File Size	942116
Page Count	9
File Format	PDF
ISBN	9781936968923
DOI	10.4108/icst.collaboratecom.2013.254126
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-10-20
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	ICST
Subject Keyword	Analytical models Session cookies One-way hash chains HTTPS Authentication Routing protocols Internet Cryptography Servers
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Preventing session hijacking in collaborative applications with hybrid cache-supported one-way hash chains

Implementation of Steganographic Authentication over Web Applications

A General Way to Break Hash-based Challenge-and-Response

A collaborative approach to secure ad hoc routing protocols

A hierarchical two-tier one-way hash chain protocol for secure internet transactions

HTTP Session Management: Architecture and Cookies Security

New efficient mechanisms to secure OLSR protocol

Analysis and Research on HTTPS Hijacking Attacks

Efficiently bypassing SNI-based HTTPS filtering

Robust and fast authentication of session cookies in collaborative and social media using position-indexed hashing

Similar Documents

Preventing session hijacking in collaborative applications with hybrid cache-supported one-way hash chains

Implementation of Steganographic Authentication over Web Applications

A General Way to Break Hash-based Challenge-and-Response

A collaborative approach to secure ad hoc routing protocols

A hierarchical two-tier one-way hash chain protocol for secure internet transactions

HTTP Session Management: Architecture and Cookies Security

New efficient mechanisms to secure OLSR protocol

Analysis and Research on HTTPS Hijacking Attacks

Efficiently bypassing SNI-based HTTPS filtering

Robust and fast authentication of session cookies in collaborative and social media using position-indexed hashing