Security experts often recommend using password-management tools that both store
passwords and generate random passwords. However, research indicates that only a small …

Instead of only considering technology, computer security research now strives to also take
into account the human factor by studying regular users and, to a lesser extent, experts like …

How do people interact with computers? This fundamental question was asked by Card,
Moran, and Newell in 1983 with a proposition to frame it as a question about human …

Reproducibility is crucial to the advancement of science; it strengthens confidence in
seemingly contradictory results and expands the boundaries of known discoveries …

The effectiveness of cyber security measures are often questioned in the wake of hard hitting
security events. Despite much work being done in the field of cyber security, most of the …

Honeywords are decoy passwords associated with each user account to timely detect
password leakage. The key issue lies in how to generate honeywords that are hard to be …

Honeyword (or decoy password) based authentication, first introduced by Juels and Rivest
in 2013, has emerged as a security mechanism that can provide security against server-side …

Password managers allow users to improve password security by handling large numbers of
strong and unique passwords without the burden of memorizing them. While users are …

The idea that people should form positive security habits is gaining increasing attention
amongst security practitioners. Habit is a well-studied concept in psychology, but the extent …

FIDO's U2F is a web-authentication mechanism designed to mitigate real-time phishing—an
attack that undermines multi-factor authentication by allowing an attacker to relay second …