Credential-guessing attacks often exploit passwords that were reused across a user's online accounts. To learn how organizations can better protect users, we retrospectively analyzed …
S Wiefling, PR Jørgensen, S Thunem… - ACM Transactions on …, 2022 - dl.acm.org
Risk-based authentication (RBA) aims to protect users against attacks involving stolen passwords. RBA monitors features during login, and requests re-authentication when …
Password-based authentication (PBA) remains the most popular form of user authentication on the web despite its long-understood insecurity. Given the deficiencies of PBA, many …
J Kunke, S Wiefling, M Ullmann, LL Iacono - arXiv preprint arXiv …, 2021 - arxiv.org
Threats to passwords are still very relevant due to attacks like phishing or credential stuffing. One way to solve this problem is to remove passwords completely. User studies on …
FIDO2 is a suite of protocols that combines the usability of local authentication (eg, biometrics) with the security of public-key cryptography to deliver passwordless …
Online services increasingly rely on user-facing interfaces to communicate important security-related account information—for example, which devices are logged into a user's …
Risk-based authentication (RBA) is an adaptive security measure used to strengthen password-based authentication against account takeover attacks. Our study on 65 …
Risk-based authentication (RBA) complements standard password-based logins by using knowledge about previously observed user behavior to prevent malicious login attempts …
With the rise in sophisticated cyber threats, traditional authentication methods are no longer sufficient. Risk-based authentication (RBA) plays a critical role in the context of the zero trust …