Preventing insider attacks : Leveraging Identity and Access Management (IAM) solutions over traditional password-based authentication
*Mallikarjun YaramadhiCorresponding authoryaramadhimallikarjun@gmail.comDepartment of Computer Science and Engineering (Data Science)DundigalInstitute of Aeronautical EngineeringHyderabad, Telangana, 500043, IndiaView full profile → , K. Subba Reddymrsubbareddy@yahoo.comDepartment of Computer Science and EngineeringRajeev Gandhi Memorial College of Engineering and TechnologyNandyal, Andhra Pradesh, 518501, IndiaView full profile → , K. Rajendra Prasadkrprgm@gmail.comDepartment of Computer Science and Engineering (Cyber Security)DundigalInstitute of Aeronautical EngineeringHyderabad, Telangana, 500043, IndiaView full profile → , Mandavilli Kavyakavyagudivada3@gmail.comDepartment of Computer Science and Engineering (Data Science)Maisammaguda DulapallyMalla Reddy UniversityHyderabad, Telangana, 500043, IndiaView full profile → , Muniyandy Elangovanmuniyandy.e@gmail.comDepartment of BiosciencesSaveetha School of EngineeringSaveetha Institute of Medical and Technical SciencesChennai, Tamil Nadu, 602105, IndiaView full profile → , S. Rajeswarisrajeswari@kluniversity.inDepartment of Computer Science and EngineeringGreen FieldsKoneru Lakshmaiah Education FoundationVaddeswaram, Andhra Pradesh, 522302, IndiaView full profile → , Reeha Thouheedreehathouheed185581@gmail.comDepartment of Computer Science and Engineering (Cyber Security)DundigalInstitute of Aeronautical EngineeringHyderabad, Telangana, 500043, IndiaView full profile →
* Corresponding author · click or hover a name for details
- Received:
- 13 Nov 2024
- Published Online:
- 17 Mar 2025
- Article type:
- Research Article
- Language:
- EN
- Article no.:
- JIOS-1931
- Pages:
- 509–519
Abstract
Keywords
Subject Classifications
References
[1] S. Rajamanickam, S. Vollala, R. Amin, and N. Ramasubramanian, “Insider attack protection: Lightweight password-based authentication techniques using ECC,” IEEE Systems Journal, vol. 14, no. 2, pp. 1972–1983 (2019).
[2] S. Shamshad, K. Mahmood, S. Kumari, and M. K. Khan, “Comments on ‘Insider attack protection: Lightweight password-based authentication techniques using ECC’,” IEEE Systems Journal, vol. 15, no. 1, pp. 877–880 (2020).
[3] M. A. Thakur and R. Gaikwad, “User identity and access management trends in IT infrastructure—An overview,” in Proc. 2015 Int. Conf. Pervasive Comput. (ICPC), Pune, India, pp. 1–4 (2015). doi: 10.1109/PERVASIVE.2015.7086987.
[4] Y. Yang, X. Chen, G. Wang, and L. Cao, “An identity and access management architecture in cloud,” in Proc. 2014 7th Int. Symp. Computational Intelligence and Design, vol. 2, Hangzhou, China, pp. 200–203 (2014). doi: 10.1109/ISCID.2014.211.
[5] V. Singh, P. Dahiya, and S. Singh, “Smart card-based password authentication and user anonymity scheme using ECC and steganography,” in Proc. 2014 Int. Conf. Advances in Computing, Communications and Informatics (ICACCI), Delhi, India, pp. 1614–1621 (2014). doi: 10.1109/ICACCI.2014.6968516.
[6] Indu and P. M. R. Anand, “Identity and access management for cloud web services,” in Proc. 2015 IEEE Recent Advances in Intelligent Computational Systems (RAICS), Trivandrum, India, pp. 406–410 (2015). doi: 10.1109/RAICS.2015.7488432.
[7] J. Petrovska, A. Memeti, and F. Imeri, “SOA approach—Identity and access management for the risk management platform,” in Proc. 2019 8th Mediterranean Conf. Embedded Computing (MECO), Budva, Montenegro, pp. 1–4 (2019). doi: 10.1109/MECO.2019.8760185.
[8] B. Li, G. Zhang, S. Lei, H. Fu, and J. Wang, “A lightweight authentication and key agreement protocol for IoT based on ECC,” in Proc. 2021 Int. Conf. Advanced Computing and Endogenous Security, Chengdu, China, pp. 1–5 (2022). doi: 10.1109/ICACES53779.2022.9763954.
[9] W. R. Claycomb, C. L. Huth, B. Phillips, L. Flynn, and D. McIntire, “Identifying indicators of insider threats: Insider IT sabotage,” in Proc. 2013 47th Int. Carnahan Conf. Security Technology (ICCST), Medellín, Colombia, pp. 1–5 (2013). doi: 10.1109/CCST.2013.6922066.
[10] E. N. Yılmaz, B. Ciylan, S. Gönen, E. Sindiren, and G. Karacayılmaz, “Cybersecurity in industrial control systems: Analysis of DoS attacks against PLCs and the insider effect,” in Proc. 2018 6th Int. Istanbul Smart Grids and Cities Congress and Fair (ICSG), Istanbul, Turkey, pp. 81–85 (2018). doi: 10.1109/SGCF.2018.8408941.
[11] Y. G. Wu, W. H. Yan, and J. Z. Wang, “Real identity-based access control technology under zero trust architecture,” in Proc. 2021 Int. Conf. Wireless Communications and Smart Grid (ICWCSG), Shenzhen, China, pp. 18–22 (2021). doi: 10.1109/ICWCSG53441.2021.9698374.
[12] K. S. Reddy, K. R. Prasad, G. R. Kamatam, R. S. Sharma, P. V. Rao, and N. K. Gupta, “An extended visual method to perform data cluster assessment in distributed data systems,” J. Supercomput., vol. 78, pp. 8810–8829 (2022), doi: 10.1007/s11227-021-04243-z.
[13] K. N. Kumar, C. K. Mohan, and L. R. Cenkeramaddi, “The impact of adversarial attacks on federated learning: A survey,” IEEE Trans. Pattern Anal. Mach. Intell. (2023). doi: 10.1109/TPAMI.2023.3322
