| Title | A Spoofing Proof Stateless Session Architecture |
| Publication Type | Conference Paper |
| Year of Publication | 2022 |
| Authors | Sultana, Fozia, Arain, Qasim Ali, Soothar, Perman, Jokhio, Imran Ali, Zubedi, Asma |
| Conference Name | 2022 2nd International Conference of Smart Systems and Emerging Technologies (SMARTTECH) |
| Keywords | Analytical models, authentication, cookies, Data models, database, Databases, Human Behavior, Metrics, policy-based governance, privacy, Protocols, pubcrawl, resilience, Resiliency, Robustness, security, sessions, SQL Injection, SQL injection detection |
| Abstract | To restrict unauthorized access to the data of the website. Most of the web-based systems nowadays require users to verify themselves before accessing the website is authentic information. In terms of security, it is very important to take different security measures for the protection of the authentic data of the website. However, most of the authentication systems which are used on the web today have several security flaws. This document is based on the security of the previous schemes. Compared to the previous approaches, this "spoofed proof stateless session model" method offers superior security assurance in a scenario in which an attacker has unauthorized access to the data of the website. The various protocol models are being developed and implemented on the web to analyze the performance. The aim was to secure the authentic database backups of the website and prevent them from SQL injection attacks by using the read-only properties for the database. This limits potential harm and provides users with reasonable security safeguards when an attacker has an unauthorized read-only access to the website's authentic database. This scheme provides robustness to the disclosure of authentic databases. Proven experimental results show the overheads due to the modified authentication method and the insecure model. |
| DOI | 10.1109/SMARTTECH54121.2022.00030 |
| Citation Key | sultana_spoofing_2022 |
A Spoofing Proof Stateless Session Architecture