Secure authentication scheme to thwart RT MITM, CR MITM and malicious browser extension based phishing attacks

Zero conf protocols date from 1999. They provide plug and play mechanisms to set up networks without having to conFigure DNS or DHCP servers. Almost every device (PCs, printers, scanners, etc.) nowadays “speaks” one of these protocols, sometimes without its owner being even aware of it. The booming IoT ecosystem, in particular, relies heavily on them. Unfortunately, these protocols offer a number of different ways to run, so called, man in the middle attacks (MITM). Some previous publications have mentioned and have taken advantage of one or another of these design flaws. In this paper, we provide a deep dive into the various issues at hand and show the extent of the problem. We consider that the growing reliance of networks on these protocols represent an underestimated and ill covered threat. We have run a number of experiments (300) to test various implementations and discuss our results. We also propose means to detect these attacks thanks to Zeek (aka Bro). We make the attack code as well as the Zeek scripts available to the research community in a format that makes replication of our results possible by researchers while not easy to use by script kiddies.

Cyber security of distribution power systems is of an increasing and pressing importance due to the fast modernisation of current systems. Cyber attacks on distribution power systems may aim to operate the system inefficiently, steal private smart meter data or cause intentional false tripping of few or all feeders. In this paper, a Man in The Middle (MiTM) attack on a power factor correction unit is implemented and demonstrated to overload a distribution feeder and cause an intentional false tripping of the entire feeder causing regional blackout. Experimental implementation of the attack is carried out in a laboratory-scale setup using commercial power equipment under different loading conditions to demonstrate the effectiveness of this attack.

Due to the consistent number of phishing attacks there is a need to develop secure authentication schemes. These days phishing is mostly carried out using malicious browser extensions or other sophisticated credential stealing techniques such as CR/RT MITM phishing attack. Therefore, it is required to develop secure authentication schemes for handling these attacks. A set of popular authentication schemes has been analyzed in this paper and it is found that they are unsafe against credential stealing attacks such as CR/RT MITM phishing, malicious browser extensions, key loggers and malwares. A novel push notification based scheme that uses BTADDR as the user identification token and performs real time modification and verification of BLE device (Bluetooth 4.0+ Version) descriptor value for user authentication has been proposed in this paper. The scheme is better in terms of security provided by the existing two factor authentication schemes (OTP/PIN, QR Code/Barcode, Graphical password/ CAPTCHA) and the usual push notification based login authentication schemes that uses username as the user identification token. Scheme has been compared with other popular schemes using the Bonneau et al. assessment framework in terms of usability, deployability and security. The results obtained are promising which suggest Bluetooth based push notification schemes can be a good option for future web authentication.

ABSTRAK Penelitian ini bertujuan untuk mengevaluasi tingkat keamanan jaringan WLAN yang telah diterapkan di SMK Kristen Getsemani Manado dengan menggunakan metode Penetration Testing. Dalam Analisa keamanan jaringan WLAN dilakukan dengan menggunakan metode Penetration Testing dengan mensimulasikan bentuk serangan terhadap jaringan menggunakan sistem operasi yang biasa digunakan dalam penetration yaitu Kali Linux. Berdasarkan hasil pengujian ditemukan bahwa jaringan WLAN di SMK Kristen Getsemani Manado masih memiliki kerentanan yang dapat dimanfaatkan oleh pihak yang tidak bertanggung jawab.Dua jenis serangan yang berhasil dilakukan dalam penelitian ini adalah Analisis Lalu lintas Jaringan(Traffic Network) dan Man In The Middle Attack. Dari temuan tersebut disimpulkan bahwa Jaringan WLAN di SMK Kristen Getsemani Manado belum memberikan perilndungan yang optimal bagi pengguna yang terhubung, sehingga masih memungkinkan terjadinya gangguan saat mengakses layanan internet. ABSTRACT This study aims to broadcast the level of WLAN network security that has been implemented at SMK Kristen Getsemani Manado using the Penetration Testing method. In the WLAN network security analysis is carried out using the Penetration Testing method with a copy of the form of attack on the network using the operating system commonly used in penetration, namely Kali Linux. Based on the test results, it was found that the WLAN network at SMK Kristen Getsemani Manado still has vulnerabilities that can be exploited by irresponsible parties. Two types of attacks that were successfully carried out in this study were Network Traffic Analysis and Man In The Middle Attack. From these findings, it is concluded that the WLAN Network at SMK Kristen Getsemani Manado has not provided optimal protection for connected users, so it is still possible for disruptions to occur when accessing internet services.

One of the most commonly used user authentication mechanisms is two factor authentication based on smart card and password. The core feature of the scheme is to enforce that the user must have the smart card and know the password in order to gain access to server. Recently, Liu et al. proposed a smart card based password authentication scheme and argued that it is secure against insider attack, replay attack and man in the middle attack and provides perfect forward secrecy. In this paper, we show security weaknesses in Liu et al.’s scheme focused on off-line password guessing attack and masquerading attack and it does not provide perfect forward secrecy and anonymity. Accordingly, we propose a privacy preserving user authentication scheme based on smart card, denoted as PUAS, to remedy these security weaknesses and to provide anonymity and perfect forward secrecy. PUAS is more secure with a bit of computational overhead to support several positive properties in security and privacy.

The open stack communication protocol of the internet of things always in security threats. The vulnerability of protocol faces a problem of man in middle attacks and loss of integrity of communication. Cryptography plays a vital role in security authentication on IoT based enable communication system. IoT devices' limited resource constraints cannot offer any security mechanism on the physical level and network level. The key generation methods uplift the security provision in IoT enables communication model. The process of key generation applied three types of cryptography algorithm, symmetric, asymmetric and hybrid algorithm. The complexity of key generation methods needs more computational time and memory; this is the limitation of IoT devices. So various authors proposed a lightweight key generation algorithm for security and authentication. This paper analyzed the performance of key generation methods based on different cryptography approaches and measured their security strength. For the analysis process, use MATLAB software and sample text data file for the communication of two parties. Some ADHOC methods apply to measure protocol weakness during the communication network compromised with a man in the middle attack. The variable key size also reflects the security strength of IoTs enable devices.

With rapid growth of wireless local area networks (WLAN) and computing techniques, handheld devices have become a popular tool in terms of working, entertaining and communicating in daily life. Considering the huge amounts of messages travelling in WLAN, a secure authentication scheme is definitely necessary, which is also required to be flexible across multiple organizations. Aiming for establishing a secure and flexible WLAN authentication scheme for various organizations, this paper reviews existing secure authentication mechanisms, describes the details of the proposed authentication scheme, and evaluates achievements of such a scheme.

In this paper, we have recently created self-driving cars and self-parking systems in human-friendly cars that can provide high safety and high convenience functions by recognizing the internal and external situations of automobiles in real time by incorporating next-generation electronics, information communication, and function control technologies. And with the development of connected cars, the ITS (Intelligent Transportation Systems) market is expected to grow rapidly. Intelligent Transportation System (ITS) is an intelligent transportation system that incorporates technologies such as electronics, information, communication, and control into the transportation system, and aims to implement a next-generation transportation system suitable for the information society. By combining the technologies of connected cars and Internet of Things with software features and operating systems, future cars will serve as a service platform to connect the surrounding infrastructure on their own. This study creates a research methodology based on the Enhanced Security Model in Self-Driving Cars model. As for the types of attacks, Availability Attack, Man in the Middle Attack, Imperial Password Use, and Use Inclusive Access Control attack defense methodology are used. Along with the commercialization of 5G, various service models using advanced technologies such as autonomous vehicles, traffic information sharing systems using IoT, and AI-based mobility services are also appearing, and the growth of smart transportation is accelerating. Therefore, research was conducted to defend against hacking based on vulnerabilities of smart cars based on artificial intelligence blockchain.

In this paper, we have recently created self-driving cars and self-parking systems in human-friendly cars that can provide high safety and high convenience functions by recognizing the internal and external situations of automobiles in real time by incorporating next-generation electronics, information communication, and function control technologies. And with the development of connected cars, the ITS (Intelligent Transportation Systems) market is expected to grow rapidly. Intelligent Transportation System (ITS) is an intelligent transportation system that incorporates technologies such as electronics, information, communication, and control into the transportation system, and aims to implement a next-generation transportation system suitable for the information society. By combining the technologies of connected cars and Internet of Things with software features and operating systems, future cars will serve as a service platform to connect the surrounding infrastructure on their own. This study creates a research methodology based on the Enhanced Security Model in Self-Driving Cars model. As for the types of attacks, Availability Attack, Man in the Middle Attack, Imperial Password Use, and Use Inclusive Access Control attack defense methodology are used. Along with the commercialization of 5G, various service models using advanced technologies such as autonomous vehicles, traffic information sharing systems using IoT, and AI-based mobility services are also appearing, and the growth of smart transportation is accelerating. Therefore, research was conducted to defend against hacking based on vulnerabilities of smart cars based on artificial intelligence blockchain.

Information is gathered in smart agriculture from a variety of sources, such as IoT devices with There are many different kinds of sensors, such as weather sensor stations, soil moisture sensors, and sensors used by insects to check crop health. The satellites and drones are used to gather this sensor data. Farm management software tracks plant schedules, pest control methods, and irrigation techniques using the collected valuable data. Any unauthorized person manipulating agricultural data in this way leads to serious issues in the agricultural food supply chain and increases market demand for food. To avoid data manipulation in agricultural information, many strategies are utilized. This work discusses man in the middle attacks, man in the cloud attacks, SQL injection attacks, and cross-site scripting (XSS) attacks. Our strategy was to efficiently test the modified data using cyber integrated agriculture management (CIAM). This strategy focuses on tailored and effective techniques for treating plant soil health, analyzing nutrition levels and pH to guide fertilization, managing water levels, and detecting early signs of pests using image recognition and IoT data. AI-driven tools can detect anomalies and prevent attacks in real time, allowing different farming practices or weather conditions and their impacts on productivity for water usage, fertilizer application, and planting strategies to be detected and avoided with an impressive 98% accuracy, affecting both local and global food security.

A provably secure and lightweight authentication scheme for Internet of Drones for smart city surveillance

Evaluating the Impact of Cyberattacks on PLC Performance: A Systematic Implementation and Empirical Investigation

Short Messaging Service (SMS) has removed difference between near and far. Because of guaranteed delivery, people use it on daily basis for connectivity. Not only humans but Information Systems have also utilized it to connect, known as automated messaging. Although automated messaging holds prominent SMS market share but full potential was not reached because of the fact that SMS has no security at all. Any SMS sent or received can be intercepted and manipulated by Man In The Middle (MITM). To resist MITM in next generation smartphones we have proposed a new framework which can be used to secure both human and automated messaging. This automated messaging. This new framework use HTTPS for secure key exchange, ECC, RSA as encryption algorithm and GSM network to send and receive encrypted messages.

Phishing is a social engineering mechanism to steal the user's credentials which are then used for identity theft leading to financial benefit. Currently majority of Phishing attacks are very unsophisticated as they focus on collecting just the credentials and do not try to validate in real time whether the received credentials are correct. It is obvious that next generation Phishing attacks will, in real time, try to check the credentials and also try to exploit the same. It is easy for a Phisher to behave as a man-in-the middle (MITM) between the user and the targeted site which is being phished. The problem with MITM attack is all the heuristics like monitoring domain name for special characters, using blacklists, page analysis etc , fail to restrict the Phisher. One of the significant literature available in this area i.e., PwdHash, which is successful for attacks when the user is on a URL other than genuine website. In this paper, we have proposed and implemented a novel approach to solve MITM over SSL which uses the genuine website URL. To tackle such attacks we propose hashing the user password with the public key of the server's digital certificate. This approach beats the MITM, since the MITM receives the hash of the original password which cannot be reused. We prove our concept with a browser plugin.

Internet of Drones (IoD), designed to coordinate the access of unmanned aerial vehicles (UAVs), is a specific application of the Internet of Things (IoT). Drones are used to control airspace and offer services such as rescue, traffic surveillance, environmental monitoring, delivery and so on. However, IoD continues to suffer from privacy and security issues. Firstly, messages are transmitted over public channels in IoD environments, which compromises data security. Further, sensitive data can also be extracted from stolen mobile devices of remote users. Moreover, drones are susceptible to physical capture and manipulation by adversaries, which are called drone capture attacks. Thus, the development of a secure and lightweight authentication scheme is essential to overcoming these security vulnerabilities, even on resource-constrained drones. In 2021, Akram et al. proposed a secure and lightweight user–drone authentication scheme for drone networks. However, we discovered that Akram et al.’s scheme is susceptible to user and drone impersonation, verification table leakage, and denial of service (DoS) attacks. Furthermore, their scheme cannot provide perfect forward secrecy. To overcome the aforementioned security vulnerabilities, we propose a secure mutual authentication and key agreement scheme between user and drone pairs. The proposed scheme utilizes physical unclonable function (PUF) to give drones uniqueness and resistance against drone stolen attacks. Moreover, the proposed scheme uses a fuzzy extractor to utilize the biometrics of users as secret parameters. We analyze the security of the proposed scheme using informal security analysis, Burrows–Abadi–Needham (BAN) logic, a Real-or-Random (RoR) model, and Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation. We also compared the security features and performance of the proposed scheme and the existing related schemes. Therefore, we demonstrate that the proposed scheme is suitable for IoD environments that can provide users with secure and convenient wireless communications.