A Framework for Server Authentication using Communication Protocol Dialects
Kailash Gogineni, Yongsheng Mei, Guru Venkataramani, Tian Lan

TL;DR
This paper introduces Verify-Pro, a novel server authentication framework using communication protocol dialects, leveraging machine learning to dynamically generate unique session-specific dialects for continuous authentication, tested on FTP, HTTP, and MQTT.
Contribution
It proposes a new dialect-based authentication system that enhances security by dynamically changing communication patterns, unlike traditional static fingerprinting methods.
Findings
Effective identification of spoofed messages with negligible overhead
Successful implementation on FTP, HTTP, and MQTT protocols
Enhanced security through dynamic dialects
Abstract
In today's world, computer networks have become vulnerable to numerous attacks. In both wireless and wired networks, one of the most common attacks is man-in-the-middle attacks, within which session hijacking, context confusion attacks have been the most attempted. A potential attacker may have enough time to launch an attack targeting these vulnerabilities (such as rerouting the target request to a malicious server or hijacking the traffic). A viable strategy to solve this problem is, by dynamically changing the system properties, configurations and create unique fingerprints to identify the source. However, the existing work of fingerprinting mainly focuses on lower-level properties (e.g IP address), and only these types of properties are restricted for mutation. We develop a novel system, called Verify-Pro, to provide server authentication using communication protocol dialects,…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsUser Authentication and Security Systems · Network Security and Intrusion Detection · IPv6, Mobility, Handover, Networks, Security
