Remote User Authentication Using VMM-based Security Manager

As the Internet becomes a popular means of business transactions, online social engineering has been used to commit fraud, identity theft, etc. The current solutions to remote user authentication are vulnerable to Social engineering attacks, because the base of these schemes, the security of the password, is no longer hold. In this paper, we present a new remote authentication scheme using the VMM-based security manager and secure I/O. We provide detailed protocols for user authentication and show that our approach can minimize the risk from online social engineering, and we proposed some additional methods to increase the system security against social engineering through other ways.