A QTE-based solution to keylogger attacks

Chien Wei Hung; Fu Hau Hsu; Shih Jen Chen; Chang Kuo Tso; Yan Ling Hwang; Po Ching Lin; Li Pin Hsu

A QTE-based solution to keylogger attacks

Chien Wei Hung, Fu Hau Hsu, Shih Jen Chen, Chang Kuo Tso, Yan Ling Hwang, Po Ching Lin, Li Pin Hsu

資訊工程學系

研究成果: 書貢獻/報告類型 › 會議論文篇章 › 同行評審

1 引文斯高帕斯（Scopus）

摘要

Nowadays keystroke logging is one of the most widespread threats used for password theft. In this paper, rather than detecting existing malware or creating a trusted tunnel in the kernel, we present a different method QTE (Quick Time Events) to protect the password that a user provides for a web page to login to a web service. Installing such solutions in a host only requires limited privileges of related computers. The QTE method utilizes a canvas to cue users when their input will be recorded or ignored by the QTE add-on, which provides a chance for users to obfuscate keyloggers by inserting meaningless letters among the keystrokes of their passwords. QTE can be applied to all websites without any modification of them.

原文	???core.languages.en_GB???
主出版物標題	SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies
頁面	62-67
頁數	6
出版狀態	已出版 - 2012
事件	6th International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2012 - Rome, Italy 持續時間: 19 8月 2012 → 24 8月 2012

出版系列

名字	SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies

???event.eventtypes.event.conference???

???event.eventtypes.event.conference???	6th International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2012
國家/地區	Italy
城市	Rome
期間	19/08/12 → 24/08/12

引用此

@inproceedings{5ee3eddbe8f5405780c24b893192160d,

title = "A QTE-based solution to keylogger attacks",

abstract = "Nowadays keystroke logging is one of the most widespread threats used for password theft. In this paper, rather than detecting existing malware or creating a trusted tunnel in the kernel, we present a different method QTE (Quick Time Events) to protect the password that a user provides for a web page to login to a web service. Installing such solutions in a host only requires limited privileges of related computers. The QTE method utilizes a canvas to cue users when their input will be recorded or ignored by the QTE add-on, which provides a chance for users to obfuscate keyloggers by inserting meaningless letters among the keystrokes of their passwords. QTE can be applied to all websites without any modification of them.",

keywords = "Authentication, Computer security, Keylogger, Privacy",

author = "Hung, {Chien Wei} and Hsu, {Fu Hau} and Chen, {Shih Jen} and Tso, {Chang Kuo} and Hwang, {Yan Ling} and Lin, {Po Ching} and Hsu, {Li Pin}",

year = "2012",

language = "???core.languages.en_GB???",

isbn = "9781612082097",

series = "SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies",

pages = "62--67",

booktitle = "SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies",

note = "6th International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2012 ; Conference date: 19-08-2012 Through 24-08-2012",

}

Hung, CW, Hsu, FH, Chen, SJ, Tso, CK, Hwang, YL, Lin, PC & Hsu, LP 2012, A QTE-based solution to keylogger attacks. 於 SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies. SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies, 頁 62-67, 6th International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2012, Rome, Italy, 19/08/12.

A QTE-based solution to keylogger attacks. / Hung, Chien Wei; Hsu, Fu Hau; Chen, Shih Jen 等.
SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies. 2012. p. 62-67 (SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies).

研究成果: 書貢獻/報告類型 › 會議論文篇章 › 同行評審

TY - GEN

T1 - A QTE-based solution to keylogger attacks

AU - Hung, Chien Wei

AU - Hsu, Fu Hau

AU - Chen, Shih Jen

AU - Tso, Chang Kuo

AU - Hwang, Yan Ling

AU - Lin, Po Ching

AU - Hsu, Li Pin

PY - 2012

Y1 - 2012

N2 - Nowadays keystroke logging is one of the most widespread threats used for password theft. In this paper, rather than detecting existing malware or creating a trusted tunnel in the kernel, we present a different method QTE (Quick Time Events) to protect the password that a user provides for a web page to login to a web service. Installing such solutions in a host only requires limited privileges of related computers. The QTE method utilizes a canvas to cue users when their input will be recorded or ignored by the QTE add-on, which provides a chance for users to obfuscate keyloggers by inserting meaningless letters among the keystrokes of their passwords. QTE can be applied to all websites without any modification of them.

AB - Nowadays keystroke logging is one of the most widespread threats used for password theft. In this paper, rather than detecting existing malware or creating a trusted tunnel in the kernel, we present a different method QTE (Quick Time Events) to protect the password that a user provides for a web page to login to a web service. Installing such solutions in a host only requires limited privileges of related computers. The QTE method utilizes a canvas to cue users when their input will be recorded or ignored by the QTE add-on, which provides a chance for users to obfuscate keyloggers by inserting meaningless letters among the keystrokes of their passwords. QTE can be applied to all websites without any modification of them.

KW - Authentication

KW - Computer security

KW - Keylogger

KW - Privacy

UR - http://www.scopus.com/inward/record.url?scp=84881444774&partnerID=8YFLogxK

M3 - 會議論文篇章

AN - SCOPUS:84881444774

SN - 9781612082097

T3 - SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies

SP - 62

EP - 67

BT - SECURWARE 2012 - 6th International Conference on Emerging Security Information, Systems and Technologies

T2 - 6th International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2012

Y2 - 19 August 2012 through 24 August 2012

ER -

A QTE-based solution to keylogger attacks

摘要

出版系列

???event.eventtypes.event.conference???

指紋

引用此