Authentication and Computer Security

点击翻译按钮获取中文摘要

The research in the area of Internet authentication has three-fold focus: strengthening user authentication, improving authentication of web servers and underlying browser-server certificate framework, and exploring threats to password-based access. Directions include enhancing password authentication by additional signals without additional demands on users; strengthening the browser-server authentication infrastructure by improving or replacing mechanisms relying on third-party certificates with pre-configured browser trust; and better understanding differences between theoretical and real-world attacks. Goals include a better understanding of current weaknesses, including deployability and single points of failure, and new mechanisms improving integrity without unrealistic expectations of users. Broader questions are also explored.