NDLI: Compartmented Security for Browsers - Or How to Thwart a Phisher with Trusted Computing

Content Provider	IEEE Xplore Digital Library
Author	Gajek, S. Sadeghi, A.-R. Stuble, C. Winandy, M.
Copyright Year	2007
Description	Author affiliation: Horst Gortz Inst. for IT Security, Ruhr-Univ. Bochum (Gajek, S.; Sadeghi, A.-R.; Stuble, C.; Winandy, M.)
Abstract	Identity theft through phishing attacks has become a major concern for Internet users. Typically, phishing attacks aim at luring the user to a faked Web site to disclose personal information. Existing solutions proposed against this kind of attack can, however, hardly counter the new generation of sophisticated malware phishing attacks, e.g., pharming Trojans, designed to target certain services. This paper aims at making the first steps towards the design and implementation of a security architecture that prevents both classical and malware phishing attacks. Our approach is based on the ideas of compartmentalization for isolating applications of different trust level, and a trusted wallet for storing credentials and authenticating sensitive services. Once the wallet has been setup in an initial step, our solution requires no special care from users for identifying the right Web sites while the disclosure of credentials is strictly controlled. Moreover, a prototype of the basic platform exists and we briefly describe its implementation
Sponsorship	ENISA Vienna Univ. of Technol. Secure Business Austria Austrian Comput. Soc
Starting Page	120
Ending Page	127
File Size	291238
Page Count	8
File Format	PDF
ISBN	0769527752
DOI	10.1109/ARES.2007.59
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2007-04-10
Publisher Place	Austria
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Operating systems Web and internet services Information security Prototypes Authentication Credit cards Computer crime Protection Web server Counting circuits
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Libarray of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Compartmented Security for Browsers -- Or How to Thwart a Phisher with Trusted Computing (2007)

Enabling commerce on the Internet

IIS Security Mechanisms

HTTPS Hacking Protection

DARE: A Framework for Dynamic Authentication of Remote Executions

Recent Advances in Trusted Grids and Peer-to-Peer Computing Systems

Assuring security and privacy for digital library transactions on the Web: client and server security policies

Internet security

The untrustworthy Web services revolution

Compartmented Security for Browsers - Or How to Thwart a Phisher with Trusted Computing

Similar Documents

Compartmented Security for Browsers -- Or How to Thwart a Phisher with Trusted Computing (2007)

Enabling commerce on the Internet

IIS Security Mechanisms

HTTPS Hacking Protection

DARE: A Framework for Dynamic Authentication of Remote Executions

Recent Advances in Trusted Grids and Peer-to-Peer Computing Systems

Assuring security and privacy for digital library transactions on the Web: client and server security policies

Internet security

The untrustworthy Web services revolution

Compartmented Security for Browsers - Or How to Thwart a Phisher with Trusted Computing