MultiStage Authentication to Enhance Security of Virtual Machines in Cloud Environment

Hm, Anitha; Jayarekha, P.

doi:10.14569/ijacsa.2021.0121068

Cited by 1 publication

(5 citation statements)

References 21 publications

(25 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…So, a graphical password is sometimes called Graphical User Authentication (GUA) [5]. GUI produced by the system During the Authentication process, the user must recognize the selection he previously selected during the registration step [1,[6][7][8][9][10]. In the second type, pure recall-based, the user must produce his graphical password, which he generated in the registration phase.…”

Section: Related Workmentioning

confidence: 99%

“…Nearly no new approaches or schemes on GP for web apps were done between 2016 and 2020, and researchers preferred to use GP in cloud computing and mobile computing instead [18][19][20][21][22][23][24]. They tended to improve the GP for cloud services and web applications start in 2020 [1,18,19,[22][23][24][25][26][27][28][29].…”

Section: Related Workmentioning

confidence: 99%

“…Cloud computing is an internet service environment using shared information, resources, software, and hardware per user's demand or company's request to access their data from anywhere or at any time. So, The GP schemes used for web applications can be used for cloud computing to successfully authenticate users before they take the privilege to access their resources or data [1,[18][19]22].…”

Section: Related Workmentioning

confidence: 99%

“…The Pass-Face technique is a weak GP as it has a short password space, but it is nearly the most preferred GP from users as the faces can be remembered easily compared to other images [19], so we used it in our comparison to prove our CGP usability and memorability. The cued recall is less usable than recognitions, but it's more secure because of its strength and large password space [1,3,9,18,19,22]. So, we used a recall technique by S. Gokhalea [16] to prove our CGP security compared with the recall techniques and Vaddeti [17] as a recognition technique.…”

Section: Related Workmentioning

confidence: 99%

“…The user authentication methods are Token-based authentication (key card, Bank Card, Smart Card ), Biometric-based Authentication (fingerprint, Iris Scan, eye scan, etc. ), and Knowledge-based Authentication (text-based password, Picture-based password) [1]. Traditional password techniques like textual passwords, also called alphanumerical usernames and passwords, are the most common type of user authentication that refers to using the alphabet, symbols, and numbers as a password to provide user identity and access resources.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Choice-Based Graphical Password (CGP) Scheme for web applications

Seksak,

Amin,

Zarif

2023

IJCI. International Journal of Computers and Information

View full text Add to dashboard Cite

Today Authentication is an essential mechanism in information security. It was used to identify authorized users and safeguard systems against hackers and spies. A graphical password (GP) is a password that employs graphics rather than text to gain access to computers. The GP is still not widely used in the actual world because users are frustrated by the numerous Login phases and the selection of various determined images from prior techniques, therefore they have returned to textual passwords. The vast majority of research has failed to discover a means to increase overall security, usability, memorability, and login time. In this paper, a novel Choice-Based Graphical Password (CGP) Scheme for Web Applications is proposed. The scheme is a two-level multifactor authentication: textual and recognition. During registration, the user first registered his/her data, and then the system assigned him/her a random and unique number. The second, user chose an image from CGP's dataset or from his/her device. CGP then resized and blurred the user-selected image before encrypting and storing it in the CGP database. The attacker claimed that the image was one element, but it was a combination of five factors (user name, user number, and his/her registered image with the same name, size, and resolution), making it difficult to guess and resistant to several attacks using The Common Attack Pattern Enumeration and Classification (CAPEC). The proposed CGP scheme's performance evaluation enhanced a 36% increase in password space, a 33% increase in possible password numbers, and a 36% increase in entropy when compared to prior methods. Our CGP approach met the challenge of the password being secure, memorable, user-friendly, and time-saving.

show abstract