user authentication

Practical Cryptographic Framework to Manage Security and Privacy for IoT Endpoint devices

-

B1 L4 R4214

In this talk, the speaker will provide a high-level introduction to his recent research on IoT endpoint security. Firstly, he will introduce requirements followed by a discussion on cryptographic algorithm implementation. He will mainly focus on an overview of efficient cryptography for IoT endpoints and system privacy issues. Then he will discuss security management approaches, positives, negatives and challenges to resolve, linking to the endpoint device security section with regards to realistic device needs/capabilities.

Dictionary Attacks on Biometrics

Prof. Nasir Memon, Vice Dean for Academics and Student Affairs and Professor of Computer Science and Engineering at the New York University Tandon School of Engineering

-

B9 L2 H2

Contrary to the prevailing belief, we show that user authentication based on biometrics is vulnerable to dictionary attacks. We show the problem is particularly significant for partial prints used in smartphones and increasingly adopted for authentication tasks ranging from unlocking the devices screen up to payment authorization. We also show that speaker verification systems are also vulnerable to dictionary attacks. We then discuss ways to mitigate such attacks.