[Paper Review] A Robust Client Verification in cloud enabled m-Commerce using Gaining Protocol

N. Chitra Kiran, Gaurav Kumar|arXiv (Cornell University)|Jan 20, 2012

Advanced Authentication Protocols Security24 references3 citations

TL;DR

This paper proposes a robust client verification mechanism for cloud-enabled mobile commerce using a novel 'Gaining Protocol' that analyzes frequent user behavior patterns on Android devices to detect malicious clients. By leveraging real-time datasets and behavioral analysis, the protocol achieves high accuracy in identifying threats, with optimal results observed using data from the last two months of collected activity.

ABSTRACT

The proposed system highlights a novel approach of exclusive verification process using gain protocol for ensuring security among both the parties (client-service provider) in m-commerce application with cloud enabled service. The proposed system is based on the potential to verify the clients with trusted hand held device depending on the set of frequent events and actions to be carried out. The framework of the proposed work is design after collecting a real time data sets from an android enabled hand set, which when subjected to gain protocol, will result in detection of malicious behavior of illegal clients in the network. The real time experiment is performed with applicable datasets gather, which show the best result for identifying threats from last 2 months data collected.

Motivation & Objective

• To address security vulnerabilities in cloud-enabled mobile commerce by ensuring mutual trust between clients and service providers.
• To develop a client verification mechanism that leverages behavioral patterns from handheld devices to detect malicious activity.
• To improve detection accuracy of unauthorized or malicious clients in real-time m-commerce transactions.
• To validate the effectiveness of the proposed protocol using real-time Android device datasets.
• To demonstrate the protocol's robustness in identifying threats over extended behavioral data sets.

Proposed method

• The Gaining Protocol analyzes sequences of frequent user events and actions on Android devices to establish behavioral baselines.
• Real-time datasets were collected from Android-enabled handsets to train and test the verification model.
• The protocol uses pattern recognition to detect deviations from normal behavior, indicating potential malicious intent.
• Behavioral anomalies are flagged based on statistical analysis of event frequency and sequence patterns.
• The system evaluates threat detection performance using a two-month dataset to assess robustness and accuracy.
• The framework is designed to support mutual authentication and trust establishment between clients and service providers in m-commerce environments.

Experimental results

Research questions

• RQ1 How can client verification be made robust in cloud-enabled m-commerce environments with dynamic user behavior?
• RQ2 To what extent can behavioral patterns on mobile devices be used to detect malicious clients?
• RQ3 What is the effectiveness of the Gaining Protocol in identifying threats using real-time Android datasets?
• RQ4 How does the protocol maintain accuracy and reliability over extended data collection periods?
• RQ5 Can the proposed method ensure mutual trust between clients and service providers in mobile commerce?

Key findings

• The Gaining Protocol demonstrated optimal threat detection performance when evaluated on a two-month dataset of real-time Android user activities.
• The system successfully identified malicious behavior by analyzing deviations in frequent user events and actions.
• The protocol achieved high accuracy in distinguishing legitimate from malicious clients based on behavioral patterns.
• Real-time data collection from Android devices enabled effective training and validation of the detection model.
• The framework proved robust in identifying threats, particularly in dynamic and cloud-integrated m-commerce environments.
• The results indicate that behavioral analysis using the Gaining Protocol is a viable method for enhancing client verification in mobile commerce.