Towards port-knocking authentication methods for mobile cloud computing. (1st November 2017)

• Record Type: Journal Article
• Authors: Khan, Suleman; Shiraz, Muhammad; Boroumand, Laleh; Gani, Abdullah; Khan, Muhammad Khurram
• Is Part Of: Journal of network and computer applications. Volume 97(2017)
• Page Start: 66
• Page End: 78
• Publication Date: 2017-11-01
• Subjects: Mobile cloud computing -- Port-knocking -- Authentication -- Denial-of-services; Microcomputers -- Periodicals; Computer networks -- Periodicals; Application software -- Periodicals; Micro-ordinateurs -- Périodiques; Réseaux d'ordinateurs -- Périodiques; Logiciels d'application -- Périodiques; Application software; Computer networks; Microcomputers; Periodicals; 004.05; 004
• DOI: 10.1016/j.jnca.2017.08.018
• Languages: English
• ISSNs: 1084-8045

Abstract

Abstract: Mobile cloud computing (MCC) is an increasingly popular research topic, partly due to the widespread adoption of mobile devices and cloud services among individual and organizational users. Security and privacy of data-at-rest and data-in-transit are two of several key issues that need to be addressed. Traditional authentication models employ third-party security monitoring mechanisms, which generally require complicated and resource-intensive mechanisms for ensuring security measures. These mechanisms are not adaptive for MCC deployment; thus, it requires lightweight authentication methods. This paper reviews existing port-knocking authentication methods by analyzing the mechanism and classifying the methods into a thematic taxonomy. Current port-knocking authentication methods are compared based on static or dynamic knocked sequences, which tend to solve the Network Address Translation (NAT) knock and Denial of Service (DoS) knock attacks. Finally, we discuss the issues and challenges in implementing port-knocking for MCC.