Virtual Password Obscuring in Avoidance of Keyloggers

Abstract

Security issues are become more and more important in network application. Traditional authentication systems used to protect access to online services with help of passwords which are vulnerable to compromise through the introduction of a keylogger [3]. Users find themselves in the position of having to enter sensitive information like passwords on untrusted machines[11] which could have a keylogger that captures the password and allow unauthorized access. The problem we address is to enable a user to login from a machine that is untrusted. There are a number of anti-logger tracking tools available in the market with which the passwords and other important information about the users are tracked. Using such anti-logger software even every keystroke given by the user gets saved automatically in the plain text format. In this proposal an application is developed for this anti logger tracking tool so that even in the presence of such anti-logger tools installed in the system passwords and other sensitive data are not revealed to the hackers. In the proposed system the user who wants to login a particular Login server, types his password in the infected system. The user instead of typing the actual password develops an obscure password using a shared key given during registration and sends it to the proxy server. This proxy server is placed between the browser and the Login server. The obscure password obtained from the browser is filtered in the proxy server and the actual password is sent to the Login server