Title
Suppressing bot traffic with accurate human attestation
Abstract
Human attestation is a promising technique to suppress unwanted bot traffic in the Internet. With a proof of human existence attached to the message, the receiving end can verify whether the content is actually drafted by humans. This technique can significantly reduce bot-generated abuse such as spamming, password cracking or even distributed denial-of-service (DDoS) attacks. Unfortunately, existing methods rely on the probabilistic characteristics of attestations and can be exploited by smart attackers. In this paper, we propose deterministic human attestation based on trustworthy input devices. By placing the root of trust on the input device, we tightly bind the input events to the content for network delivery. Each input event is generated with a cryptographic hash that attests to human activity and the message consisting of such events gets a third-party verifiable digital signature that is carried to the remote application. For this, we augment the input device with a trusted platform module (TPM) chip and a small attester running inside the device. We focus on trustworthy keyboards here but we plan to extend the framework to other input devices.
Year
DOI
Venue
2010
10.1145/1851276.1851287
ApSys
Keywords
Field
DocType
promising technique,human existence,bot-generated abuse,trustworthy keyboard,human activity,human attestation,deterministic human attestation,accurate human attestation,bot traffic,trustworthy input device,input event,input device,distributed denial of service,digital signature,trusted computing,trusted platform module,chip,ddos attack
Password cracking,Trusted Computing,Denial-of-service attack,Computer security,Computer science,Cryptographic hash function,Computer network,Digital signature,Trusted Platform Module,Direct Anonymous Attestation,Input device
Conference
Citations 
PageRank 
References 
1
0.36
14
Authors
3
Name
Order
Citations
PageRank
Muhammad Asim Jamshed11356.57
Wonho Kim239027.93
KyoungSoo Park3119873.47