Abstract:
Web services send and receive messages over standard Internet protocols such as HTTP. Plaintext messages can be intercepted by an attacker and potentially viewed or even modified for malicious purposes. By using message protection, we can protect sensitive data against threats such as eavesdropping ...
Read More ...
Abstract:
Web services send and receive messages over standard Internet protocols such as HTTP. Plaintext messages can be intercepted by an attacker and potentially viewed or even modified for malicious purposes. By using message protection, we can protect sensitive data against threats such as eavesdropping and data tampering. Sensitive data transmitted over the Internet should always be encrypted to avoid potential intruders from eavesdropping on the communication anywhere along the route the data takes between the two machines.
In this paper, we provide a feasible solution to enhance the integrity of sensitive data. Our approach is to use variant encryption algorithms based on session key which is sent with the client page from the server side where it is used to encrypt and decrypt data so that the data will be unreadable from the attacker. The encryption algorithm will be changed to every connection state. Our approach is very complex as we must cryptanalysis and modify the plaintext from attackers and make it applicable to client-server architecture.
