Phoenix: A Fault-Tolerant Distributed Web Storage Based on URLs

Gonzalez-Compeán, J. L.; Marcelín-Jiménez, Ricardo

doi:10.1109/ispa.2011.33

Cited by 18 publications

(10 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Second, with the efficient password cracking using probabilistic context‐free grammars, we further improve it to quickly crack the known‐length password. We confirm that it is unsuitable to further deploy PPPoE in commercial using until all of the proven weak authentication protocols are abolished and replaced with more secure Extensible Authentication Protocols (EAPs), and the security of MD5‐based network applications should be re‐evaluated .…”

Section: Introductionmentioning

confidence: 84%

“…(4) Generate pad for id||P||C with the guessing l of P. (5) Generate C′ = C||pad||r, where r is randomly generated, and send it with the unchanged value id to the peer. (6) Receive R′ from the peer, reply an affirmative signal to it, generate pad1 for C′ and check if R′ = MD5 R (r) holds. If so, l is the very length.…”

Section: On-line Length Recovery Attack To Chapmentioning

confidence: 99%

See 1 more Smart Citation

On the security of PPPoE network

Liu

Xie

Feng

et al. 2012

Security Comm Networks

View full text Add to dashboard Cite

Point‐to‐Point Protocol over Ethernet (PPPoE) is a network protocol for encapsulating PPP frames inside Ethernet frames. It is widely used by commercial Internet service providers to provide Internet surfing for customers who pay bills. In this paper, we analyze the security of PPPoE network. We find that we can easily collect information about both the peers and the PPPoE authentication servers. We can use such information to recover the peer's authentication password by silently impersonating the server, which is undetectable in the network. We impersonate the server in the peers' LAN and get their passwords by hijacking the peers' PPPoE connections and negotiating for using the Password Authentication Protocol (PAP). We further propose an efficient password recovery attack against the Challenge‐Handshake Authentication Protocol (CHAP). We first recover the length of the used password through on‐line queries, based on the weakness of MD5 input pre‐processing. Then, we crack the known‐length password off‐line, using the probabilistic context‐free grammars. We point out that PPPoE cannot be used anymore until all of the weak authentication protocols including PAP, CHAP, and Microsoft CHAP are abolished right now and replaced with more secure Extensible Authentication Protocols. Copyright © 2012 John Wiley & Sons, Ltd.

show abstract

Section: Introductionmentioning

confidence: 84%

Section: On-line Length Recovery Attack To Chapmentioning

confidence: 99%

On the security of PPPoE network

Liu

Xie

Feng

et al. 2012

Security Comm Networks

View full text Add to dashboard Cite

show abstract

“…This model allows Nenek's tools to get access to the resources that were acquired and manufactured by the virtual community. It maps each resource to an absolute uniform resource locator (URL), which is used to get access to that resource (Gonzalez and Marcelin-Jimenez 2011). When the life cycle tree of this resource has additional labels, this model builds an XML to keep the information associated to the labels of description and context.…”

Section: Sharing and Publication Mapping Modelmentioning

confidence: 99%

Nenek: a cloud-based collaboration platform for the management of Amerindian language resources

Gonzalez-Compeán

Hooft

Carretero

et al. 2016

Lang Resources & Evaluation

View full text Add to dashboard Cite

This article presents Nenek: A cloud-based collaboration platform for language documentation of underresourced languages. Nenek is based on a crowdsourcing scheme that supports native speakers, indigenous associations, government agencies and researchers in the creation of virtual communities of minority language speakers on the Internet. Nenek includes a set of web tools that enables users to work collaboratively on language documentation tasks, build lexicographic assets and produce new language resources. This platform includes a three-stage management model to control the acquisition of existent language resources, the manufacturing of new resources, as well as their distribution within the virtual community and to the general public. In the acquisition stage, existent language resources are either automatically extracted from the web by a crawler or received through donations from users who participate in a monolingual social network. In the manufacturing stage, lexicographic and collaborative tools enable users to build new resources while the acquired and manufactured resources are published in the diffusion stage, either within the virtual community or publicly. We present a life cycle mapping scheme that registers the transformations of the language resources at each of the three stages of language resource management. This scheme also traces the utilization and diffusion of each resource produced by the virtual community. The paper includes a case study in which we present the use of the Nenek platform in a language documentation project of a Mayan language spoken in Mexico's Gulf coast region called Huastec. This case study reveals Nenek's efficiency in terms of acquisition, annotation, manufacturing and diffusion of language resources; it also discusses the participation of the members of the virtual community.

show abstract

“…Data availability relates to the replication technique the Amazon infrastructure uses. 10 There also are solutions that take advantage of public cloud storage using replication techniques based on RAID, for example Redundant Array of Cloud Storage (RACS), a proxy located between multiple cloud storage providers and customers. 11 RACS distributes data in a way that provides an opportunity for clients to tolerate interruptions in a public cloud storage service or when the price for using such services gets too high.…”

Section: Related Workmentioning

confidence: 99%