Login Password Research Articles

Based on Embedded-RAM Smart Home

This design is based on the FS-MP1A development board, using the STM32MP157A processor. The smart home system includes a door access module, data acquisition and monitoring module, device control module, weather forecast module, and Baidu Cloud interaction module. The door access module mainly uses the sqlite3 database to store residents’ login information and implements password login for unlocking. The monitoring system primarily uses the V4L2 driver for the OV5640 camera, sets the video capture format to YUYN, converts the YUYN format video raw frames to RGB format, and then converts the RGB data to QImage for display on the screen. Environmental monitoring mainly involves detecting indoor light intensity, temperature, and humidity. The device control module mainly controls the on/off of LED lights, activates the buzzer, and regulates the fan speed. The weather forecast module mainly forecasts the weather conditions of the local city and displays the weather information on the screen. The Baidu Cloud interaction module mainly facilitates information exchange and controls devices such as fans, lights, and the buzzer.

TRIUMPH OF SECURITY : FORTIFYING DIGITAL FORTRESSES WITH TRIPLE GUARD AUTHENTICATION

Abstract : Network security is crucial in today’s interconnected world, and traditional text-based passwords are insufficient. This paper introduces a Three-Level Security system to enhance protection with a multi-tiered approach: Level-1 Login-based Password, Level-2 Graphical Authentication, and Level-3 Image-Based Password. The system ensures authorized access, defines user permissions, and encrypts data. It includes monitoring, rate limiting, regular updates, and penetration testing, using Python-based tools for vulnerability scanning. Triple Guard encrypts data both at rest and in transit, ensuring confidentiality and integrity. It adaptive to emerging threats and vulnerabilities, integrating Python-based security testing tools for vulnerability scanning and code analysis. By providing developers and administrators with a robust and extensible password security solution . Triple Guard encrypts data both at rest and in transit, preserving its confidentiality and integrity. Index Terms :-. Login Password Authentication, Graphical Authentication, Image Authentication, Python, Chatgpt.

Browser‐in‐the‐middle attacks: A comprehensive analysis and countermeasures

AbstractA browser‐in‐the‐middle (BITM) attack occurs when an attacker intercepts and manipulates communication between a user's web browser and the website they are attempting to visit. This approach is risky, as it allows the attacker to eavesdrop on crucial information, such as login passwords or financial details, leading to unauthorized access and potential data breaches. Moreover, the attacker can inject malicious content into the conversation, compromising the integrity of the data shared between the user's browser and the website. The article delves into the BITM attack as a strategy employed in phishing assaults. The article emphasizes precautionary measures to safeguard against BITM attacks. Additionally, it offers insights into how users can defend themselves and respond to an attack. The significance of user awareness in avoiding phishing attempts is a key highlight of the article.

Anticipate Password Security with Burp Suite Using the Brute Force Attack Method

Website is one of the information and communication media that requires internet to run. Password generation is still less aware of user security. This provokes cyber criminals to carry out attacks to retrieve user login passwords. One possible attack is a brute force attack by experimenting with all possible passwords. This research aims to discuss brute force attack techniques and how to prevent them so that users can be more careful in creating passwords and be more aware of the security of their passwords. This research shows that the brute force method can work perfectly if there is no Captcha on the web login, limiting logins that do not block accounts for a long time, and not using Two Factor Authentication.

Password generation using array generating interval timed colored Petri net (AGITCPN) for effective security

Proportions of web users are becoming more and more. To secure their information they create their own login identification and password. Secret word confirmation is a cycle that includes a client contributing an ID and key that is then checked against certifications. They are probably been approached to make or potentially enter a secret key to access an individual record, regardless of whether that is a web-based portal or applications. In general the password will be in the form of string with the characters. Securing the information has become a challenging factor for web users. When the user creates a highly secured password it takes time for the hackers to crack it with the help of available tools. Cracking the password has created a serious challenge to the users to provide a highly secured password. Many authentication methods have been proposed to secure their data. Password authentication using Petri nets, Colored Petri nets have been used to create a secured login password. In this paper, we proposed and developed the application of Interval Timed colored Petri nets to generate password which will be more secured. This research work provides a new platform for the web users to create a matrix type password in a secured way. This helps them to secure their information more than ever before. To create this matrix type password, applications of Interval Timed colored Petri nets are used.

Multi‐channel attack detection based on lightweight message authentication code access control using Internet of Things design

AbstractThe Internet of Things (IoT) is a network of interconnected, Internet‐connected items that can gather and transmit data without the need for human interaction through a wireless network. Cryptography is a way of using codes to safeguard information and communications so that only those who are supposed to read and process it may do so. Existing system shows privacy and replication issues caused during cipher text attribute set based encryption. The technical issues in achieving secured authentication is removed by using multi‐channel attack detection based on lightweight message authentication code (LMAC) access control using IoT design in which collision attack can be removed by using secure hash algorithm based Merkle tree and to control sinkhole attacks agent navigation algorithm is proposed and long short‐term memory (LSTM) recurrent neural network (RNN) is proposed to provide the conformity of the user login password. Moreover, to identify attackers on the transmitter side by ensuring authentication, multichannel detection method is proposed. Finally, the security and privacy is improved by using LMAC and user revocation. Thus the multi‐channel attack detection based on LMAC using IoT design can be outperforming the other existing model with higher throughput and low execution time.

LBVP: A Lightweight Batch Verification Protocol for Fog-Based Vehicular Networks Using Self-Certified Public Key Cryptography

To achieve efficient vehicular network communication and service, researchers proposed fog-based vehicular networks (FVNs). One of the prerequisites for developing large-scale FVNs is ensuring the security and privacy of the entire network environment. However, the existing schemes proposed for FVNs exist considerable calculation and communication costs and/or security vulnerabilities. Therefore, to promote efficient FVN authentication, we propose a lightweight security protocol using self-certified public key cryptography. In the protocol, the trusted authority does not need to participate in the authentication process between the vehicle and the fog node online. And the vehicle can dynamically update its login password and pseudonym, without performing complicated interactive steps with the trusted authority. In addition, our protocol supports batch verification, which significantly improves the system authentication efficiency. A detailed security analysis reveals that our protocol can meet the security requirements of vehicular networks while resisting the common types of attack. Calculation and communication overhead comparisons further prove that our protocol exhibits better performance than related schemes.

Intensify Cloud Security and Privacy Against Phishing Attacks

The world of computation has shifted from centralized (client-server, not web-based) to distributed systems during the last three decades. We are now reverting to virtual centralization, i.e., Cloud Computing (CC). In the world of computation, the location of data and processes makes all the difference. A person has complete control over the data and operations in their computer. On the other side, CC involves a vendor providing service and data upkeep. At the same time, the client/customer is ignorant of where the processes are operating or where the data is kept. As a result, the client does not influence it and doesn't have the right to do it. When it comes to data security in cloud computing, the vendor must guarantee service level agreements (SLAs) to persuade the client. As a result, the SLA must define several degrees of security and their complexity depending on the benefits for the client to comprehend the security rules in place. Phishing is a social engineering assault that is frequently used to obtain user information, such as login passwords and credit card details. It happens when an attacker poses as a trustworthy entity and tricks the victim into opening an e-mail, instant message, or text message. In this research paper, the methodology that tries to identify the phishing attack in the cloud eco-system has been explored and mentioned. The approach used here classifies the malicious and non-malicious URLs.

A Study on Various Phishing Techniques and Recent Phishing Attacks

Now-a-days internet has become a very unsafe space to deal with. Hackers are constantly trying to gain the user's personal information, and detailed credentials. So many websites on the internet, even though safe, this safety cannot be assured by all websites. These rule breakers avoid abiding by rules, and try to employ methods like trickery and hacking to gain illegal access to private information. To be able to overcome this problem, we need to first understand the intricacies of how the virus is designed. This paper mainly deals with the different phishing techniques and recent phishing attacks that took place during COVID 19. like Link Manipulation, Filter Evasion, Website Forgery, Phone Phishing and Website Forgery. We have also studied a subtle method to perform phishing attacks that makes links appear legitimate, but actually redirect a victim to an attackers website called Convert Redirect. In this paper, we present some phishing examples like Paypal phishing which involves sending an email that fraudulently claims to be from a well known company and Rapidshare Phishing where in the spoofed web page, phishers attempt to confuse their victims just enough to entice them to enter their login name and password. To perform these types of phishing the Phishers uses so many phishing techniques like Link Manipulation, Filter Evasion, Website Forgery, Phone Phishing and Website Forgery. Phishing techniques include the domain of email messages. Phishing emails have hosted such a phishing website, where a click on the URL or the malware code as executing some actions to perform is socially engineered messages. Lexically analyzing the URLs can enhance the performance and help to differentiate between the original email and the phishing URL. As assessed in this study, in addition to textual analysis of phishing URL, email classification is successful and results in a highly precise anti phishing. From the thorough analysis of the research paper, we have understood how phishing attacks work and the different methods employed to carry out the attack. Also, we have studied some of the most recent phishing attacks and measures taken by the authorities to overcome and prevent any such attacks in future.

A Study on Various Phishing Techniques and Recent Phishing Attacks

Now-a-days internet has become a very unsafe space to deal with. Hackers are constantly trying to gain the user's personal information, and detailed credentials. So many websites on the internet, even though safe, this safety cannot be assured by all websites. These rule breakers avoid abiding by rules, and try to employ methods like trickery and hacking to gain illegal access to private information. T o be able to overcome this problem, we need to first understand the intricacies of how the virus is designed. This paper mainly deals with the different phishing techniques and recent phishing attacks that took place during COVID 19. like Link Manipulation, Filter Evasion, Website Forgery, Phone Phishing and Website Forgery. We have also studied a subtle method to perform phishing attacks that makes links appear legitimate, but actually redirect a victim to an attacker's website called Convert Redirect. In this paper , we present some phishing examples like Paypal phishing which involves sending an email that fraudulently claims to be from a well known company and Rapidshare Phishing where in the spoofed web page, phishers attempt to confuse their victims just enough to entice them to enter their login name and password. To perform these types of phishing the Phishers uses so many phishing techniques like Link Manipulation, Filter Evasion, Website Forgery, Phone Phishing and Website Forgery. Phishing techniques include the domain of email messages. Phishing emails have hosted such a phishing website, where a click on the URL or the malware code as executing some actions to perform is socially engineered messages. Lexically analyzing the URLs can enhance the performance and help to differentiate between the original email and the phishing URL. As assessed in this study , in addition to textual analysis of phishing URL, email classification is successful and results in a highly precise anti phishing. From the thorough analysis of the research paper, we have understood how phishing attacks work and the different methods employed to carry out the attack. Also, we have studied some of the most recent phishing attacks and measures taken by the authorities to overcome and prevent any such attacks in future.

Peer review declaration

All papers published in this volume of IOP Conference Series: Earth and Environmental Science have been peer reviewed through processes administered by the Editors. Reviews were conducted by expert referees to the professional and scientific standards expected of a proceedings journal published by IOP Publishing. • Type of peer review: Double-blind • Conference submission management system: we develop our submission system where the editors, the authors and the reviewers can access using their unique login password. • Number of submissions received: 311 abstracts • Number of submissions sent for review: 241 abstracts • Number of submissions accepted: 81 articles • Acceptance Rate (Number of Submissions Accepted/Number of Submissions Received X 100): 26% • Average number of reviews per paper: 2 reviews • Total number of reviewers involved: 34 reviewers • Any additional info on review process: - • Contact person for queries: Name : Dr SupariAffiliation : Center for Climate Change Informastion, Agency for Meteorology, Climatology and GeophysicsEmail : supari@bmkg.go.id; supari.bmg@gmail.com

Smart Polling System

Smart polling system is an android application that facilitates user (voter), nominee and administrator (who will be in charge and will verify all the user information) to participate in online voting. Our smart polling system is highly secured, and it has a simple and interactive user interface. The proposed online portal is secured and have unique security feature such as unique id generation that adds another layer of security (except login id and password) and gives admin the ability to verify the user information and to decide whether he is eligible to vote or not. It also creates and manages voting and election details as all the users must login by user name and password and click on candidates to register vote.

Secured Application Environment using Enhanced Graphical Passwords

Today computer and mobile based applications has become an integral part of our life. Thus, there arises a need of a reliable security while using these applications using authentication techniques that are most secured and hard to crack. Today many authentication techniques are introduced for better security and replace textual authentication technique. But these techniques are proving insufficient, so new ways should be studied and introduced for better security. So, we are concentrating on two such techniques, first we studied graphical authentication systems using images. The one such technique called gRat which uses set of images for authentication was found to be useful. The second for searching a different authentication technique we came across ENP which explains how to provide security using to an application by using hashing, ascii, negation and cryptography together for a secured application. So, we find out that one technique is insufficient and more than two techniques should be combined together. So, in this paper we are recommending a dual authentication technique. First technique will be used for login id and other will be used for login password. The first technique uses a set of images with specific border colors for authentication and is called Graphical random authentication technique (gRat). In this technique a set of images with different boundary colors are displayed for the user which are shown randomly each time a user attempts a login ID. The user has to select the same set of images with same boundary color in same format for login ID verification than only second technique for login password will be shown. The second technique uses encryption and negative password together called as Encrypted negative password (ENP). In this technique while deciding a password a plain textual password is accepted from the user and then it is converted to hash code using hashing algorithm. Then the hash code is converted to an ascii code od 0’s and 1’s. Then negation is applied to the ascii where we get a negative text. The negative text is then encrypted. This process is followed in reverse while authentication. After second correct verification main application will be started. Both authentication data will be secured by Advanced encryption standard (AES) algorithm and saved on cloud. We are using public cloud Google drive as our cloud as it is free and more secured. Thus, while testing the application for authentication using both techniques together our system becomes very secured and almost unbreakable.

Confidentiality of Information Stored on the Desktop of Computers in a Psychiatric Hospital: Before and After an Intervention.

The aim of this before-after study was to evaluate the effect of an educational intervention on the confidentiality status of unprotected information stored on computer desktop in a psychiatric hospital. All switched-on computer systems were inspected in 2017-2018 at the baseline and 7 months after placing an educational poster. The log-in conditions and files stored on the desktop were reviewed using a researcher-made checklist; moreover, users answered questions about the possible mechanism of deleting information stored on the desktop. The number of files stored on desktops, the number of systems left switched on and unused, and the number of systems without a log-in password decreased in the second phase than the first phase of this study. Furthermore, automatic locking of computers after a specified period increased. The educational intervention reduced significantly the storage of information on desktops and improved security mechanisms such as using passwords and autolock. This study showed using an educational poster can encourage users to preserve the security of information, comply with security guidelines such as locking unused computers, and prevent access to confidential information.

RFID-based Authentication System for Agriculture Application

This article proposes a design of smart and secure system topology for login using a RFID technology. Proposed technology ensures better safety, security and protection of your valuable data. The valuable information has been protected for computer hardware system and hence it is protected with login password. The more passwords for various data access such as laptops, IOT devices and to access cloud information. The very important application related to password protection and access data cloud field is agriculture. Due many hackers and IOT devices are enabled by many users hence its not safe to type and reuse password in many place led to leave of password. The proposed system develops safe and secure Radio-frequency identification (RFID) technique apply to IOT cloud architecture for enabling device and access the data to login and password device to share and open data yourself in a secured manner. The proposed device is plug-in concept device in IOT device so that system will require authenticate corresponds to operate the drive. If any misuse of that device face automation is enable hence to share safe data all around related to field of agriculture..

State space classification of Markov password – an alphanumeric password authentication scheme for secure communication in cloud computing

PurposePurpose of this study is to classify the states of Markov Chain for the implementation of Markov Password for effective security. Password confirmation is more often required in all authentication process, as the usage of computing facilities and electronic devices have developed hugely to access networks. Over the years with the increase in numerous Web developments and internet applications, each platform needs ID and password validation for individual users.Design/methodology/approachIn the technological development of cloud computing, in recent times, it is facing security issues. Data theft, data security, denial of service, patch management, encryption management, key management, storage security and authentication are some of the issues and challenges in cloud computing. Validation in user login authentications is generally processed and executed by password. To authenticate universally, alphanumeric passwords are used. One of the promising proposed methodologies in this type of password authentication is Markov password. Markov passwords – a rule-based password formation are created or generated by using Markov chain. Representation of Markov password formation can be done by state space diagram or transition probability matrix. State space classification of Markov chain is one of the basic and significant properties. The objective of this paper is to classify the states of Markov chain to support the practice of this type of password in the direction of effective authentication for secure communication in cloud computing. Conversion of some sample obvious password into Markov password and comparative analysis on their strength is also presented in this paper. Analysis on strength of obvious password of length eight has shown range of 7%–9% although the converted Markov password has shown more than 82%. As an effective methodology, this password authentication can be implemented in cloud portal and password login validation process.FindingsThe objective of this paper is to classify the states of Markov chain to support the practice of this type of password in the direction of effective authentication for secure communication in cloud computing. Conversion of some sample obvious password into Markov password and comparative analysis on their strength is also presented in this paper.Originality/valueValidation in user login authentications is generally processed and executed by password. To authenticate universally, alphanumeric passwords are used. One of the promising proposed methodologies in this type of password authentication is Markov password.

Retracted] Course Ideological and Political Teaching Platform Based on the Fusion of Multiple Data and Information in an Intelligent Environment

In the current teaching of politics, teachers still focus on the cultivation of the basic intelligence of students’ language intelligence, and it is easy to ignore the cultivation of other intelligences that affect the overall development of students. This research mainly discusses the design of curriculum ideological and political teaching platform based on the fusion of multiple data and information in an intelligent environment. This research adopts the MVC architecture, and the web application developed based on the MVC (Model View Controller) architecture pattern is easier to complete the realization of multiple controllers. The front desk ideological and political teaching teacher module includes the login system. In addition, the teacher can view the test status of a specific student and can also pay attention to the total intelligence of all students who have been tested. The process of the student test is to enter the correct account and password to log in to the system and then perform the test. After the test, the test result can be viewed, and the personal information can be maintained at the same time. In addition, the personal login password can be modified. The existence of the database is to ensure that the data is correct and effective. This system uses MySql to design the database, and the name of the database is braintest_db. The data table in relational database is the main object of storing and managing data, and it is also an important task of database design. This system has designed three kinds of user logins, namely, administrator, student, and teacher, and login can be realized according to the account number and password. Among them, teacher’s participation is by inquiring about students’ test situation, paying attention to students’ multiple intelligences, and teaching students in accordance with their aptitude. In addition, the main object of this test is students, and the analysis of multiple intelligences is realized through student tests. Students are vitally physical objects that can be tested and searched for results. In the study, 20% of the students both learn the basic content of the platform and use the forum. This research will help improve students’ literacy in an all‐round way.

Moppet Care: Remote Child Monitoring System

Smart phones play a major role in our daily life. Today even young children make use of smart phones. This project deals with an innovative method for protecting the young children from misusing smart phones. Child smart phone can be monitored remotely from the parent smart phone using android app. Initially the app should be installed in both child and parent device. Then the parent must create an account in it. After successful registration of parent account, the parent can now activate the monitoring in the child device. This activation in the child device allows the parent to monitor the child device remotely from their own device. Monitoring of the child device includes the details such as call log, message log, app list, web history and location of the child device. Once the monitoring is being activated in the child device it can neither be deactivated nor uninstalled without the parent login password. The parent can have complete control on their children by monitoring their child device remotely and restricting them from misusing their smart phone.

Sistem Monitoring Login Failure dengan Via Telegram dari Serangan Brutus pada Router Mikrotik

A monitoring system is needed to monitor a network topology from attacks that might occur at that time. A realtime monitoring system is needed to find out the attack. Therefore, in this study, an attack scenario on a proxy router was carried out using a brute force technique. The brute force technique is an efficient method that tries every possible login password character that the network administrator might use. This brute force technique already exists in the application used, namely Brutus. Brutus is executed by focusing the attack on port 23 telnet on the proxy router. The system log listed as a login failure caused by a brute attack on the proxy router will be forwarded by a script that is running to a notification with a network administrator telegram bot. From the results of research that has been carried out on the monitoring system on the proxy running in real time to notify the login failure message via telegram. The telegram notification will stop if the password has been found by Brutus or the Brutus dictionary does not find the password on the designed Mikrotik router network. Prevention is done by disabling open ports and activating the drop firewall menu if it finds a possible attacker's ip address on the mikrotik router to reduce attacks from the attacker.

Implementasi One Time Password Menggunakan Algoritma SHA-512 Pada Aplikasi Penagihan Hutang PT. XHT

PT. XHT is a private company engaged in debt collection. This company has a web-based debt collection system. However, there has been a theft of usernames and passwords on the running system. This is due to many things, including passwords that are too easy. One solution to overcome this is to increase authentication security, which is a One-Time Password system. In this research, login security system is created using the SHA-512 hash function. In build this system using the Waterfall method as the life cycle of software development (SDLC). This system is a random code can only be used once. The test involved several parties, including Media Expert and Material Expert, and using the black box method. Black box test results indicate the feasibility of the function from the input and output buttons. Meanwhile, the results from the test by the Media Expert scored 82%, while the Material Expert was 75%. So it can be concluded that the One-Time Password login system using SHA-512 is suitable for user security.