Search

Zero-knowledge authentication protocols are an alternative to authentication protocols based on public key cryptography. Low processing and memory consumption make them especially suitable for implementation in smart card microprocessors, which are severely limited in processing power and memory space. This paper describes a design and implementation of a software library providing smart card application developers with a reliable authentication mechanism based on well-known zero-knowledge authentication schemes. Java Card is used as the target smart card platform implementation based on the evaluation of the Fiat-Shamir (F-S) and Guillou-Quisquater (G-Q) protocols under various performance criteria are presented to show the effectiveness of the implementation and that G-Q is a more efficient protocol.

Due to the unprecedented growth of outsourcing ICT projects by the Iranian government, a critical need exists for the proper execution and monitoring of these projects. In this paper, the authors propose a web-based project management system to improve the efficiency and effectiveness of the management processes and accelerate decision making. Based on the requirements and information flow between various units involved in the complete life-cycle of ICT project management, a functional model and system architecture with various underlying structures has been designed. The functional model contains two sub-systems: process management and information service. The proposed system structure is based on a four-layer client-server computing model. As a part of a publically available ICT system, it must be secure against cybercrime activities. This system can bring efficiency in managing the projects, improve decision making, and increase the overall management process with total accounting and management transparency. The proposed system overcomes the problems associated with a central system and traditional management processes, as is currently the case in Iran.

This paper describes two novel methods for active detection and prevention of ARP-poisoning-based Man-in-the-Middle (MitM) attacks on switched Ethernet LANs. As a stateless and inherently insecure protocol, ARP has been used as a relatively simple means to launch Denial-of-Service (DoS) and MitM attacks on local networks and multiple solutions have been proposed to detect and prevent these types of attacks. MitM attacks are particularly dangerous, because they allow an attacker to monitor network traffic and break the integrity of data being sent over the network. The authors introduce backwards compatible techniques to prevent ARP poisoning and deal with sophisticated stealth MitM programs.