Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices
Joint Authors
Li, Hui
Pan, Xuesong
Wang, Xinluo
Feng, Haonan
Shi, Chengjie
Source
Wireless Communications and Mobile Computing
Issue
Vol. 2020, Issue 2020 (31 Dec. 2020), pp.1-14, 14 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2020-09-01
Country of Publication
Egypt
No. of Pages
14
Main Subjects
Information Technology and Computer Science
Abstract EN
We present a novel attack named “Authenticator Rebinding Attack,” which aims at the Fast IDentity Online (FIDO) Universal Authentication Framework (UAF) protocol implemented on mobile devices.
The presented Authenticator Rebinding Attack rebinds the victim’s identity to the attacker’s authenticator rather than the victim’s authenticator being verified by the service in the UAF protocol, allowing the attacker to bypass the UAF protocol local authentication mechanism by imitating the victim to perform sensitive operations such as transfer and payment.
The lack of effective authentication between entities in the implementations of the UAF protocol used in the actual system causes the vulnerability to the Authenticator Rebinding Attack.
In this paper, we implement this attack on the Android platform and evaluate its implementability, where results show that the proposed attack is implementable in the actual system and Android applications using the UAF protocol are prone to such attack.
We also discuss the possible countermeasures against the threats posed by Authenticator Rebinding Attack for different stakeholders implementing UAF on the Android platform.
American Psychological Association (APA)
Li, Hui& Pan, Xuesong& Wang, Xinluo& Feng, Haonan& Shi, Chengjie. 2020. Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices. Wireless Communications and Mobile Computing،Vol. 2020, no. 2020, pp.1-14.
https://search.emarefa.net/detail/BIM-1214593
Modern Language Association (MLA)
Li, Hui…[et al.]. Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices. Wireless Communications and Mobile Computing No. 2020 (2020), pp.1-14.
https://search.emarefa.net/detail/BIM-1214593
American Medical Association (AMA)
Li, Hui& Pan, Xuesong& Wang, Xinluo& Feng, Haonan& Shi, Chengjie. Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices. Wireless Communications and Mobile Computing. 2020. Vol. 2020, no. 2020, pp.1-14.
https://search.emarefa.net/detail/BIM-1214593
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1214593