Personal knowledge questions for fallback authentication: Security questions in the era of Facebook

SOUPS 2008 - Proceedings of the 4th Symposium on Usable Privacy and Security

Volumn , Issue , 2008, Pages 13-23

  Rabkin, Ariel ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Authentication; Questions; Security

Indexed keywords

CHALLENGE QUESTIONS; FACEBOOK; PERSONAL INFORMATIONS; PERSONAL SECURITIES; QUESTIONS; SECURITY; USABILITY AND SECURITIES; USER STUDIES;

HARDNESS; USABILITY ENGINEERING;

AUTHENTICATION;

EID: 65449137148     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1408664.1408667     Document Type: Conference Paper

References (20)

1. Maltego. Available online: http://www.paterva.com/maltego/.
2. F. Asgharpour and M. Jakobsson. Adaptive Challenge Questions Algorithm in Password Reset/Recovery. In First International Workshop on Security for Spontaneous Interaction: IWISSI '07, September 2007.
3. J. Chao. Trend in canine names reflects the times. San Francisco Examiner, page B1, Oct 12 1997.
4. Facebook. Statistics. http://www.facebook.com/press/info.php?statistics.
5. A. Felt and D. Evans. Privacy Protection for Social Networking Platforms. In Web 2.0 Security and Privacy 2008, May 2008.
6. J. Franklin, V. Paxson, A. Perrig, and S. Savage. An inquiry into the nature and causes of the wealth of internet miscreants. In Proceedings of the 14th ACM conference on Computer and Communications Security, 2007.
7. L. Frieder and J. Zittrain. Spam Works: Evidence from Stock Touts and Corresponding Market Activity. Berkman Center Research Publication, 2006.
8. S. Garfinkel. Email-based identification and authentication: an alternative to PKI? IEEE Security & Privacy Magazine, 1(6): 20-26, 2003.
9. V. Griffith and M. Jakobsson. Messin' with Texas: Deriving mothers maiden names using public records. In Applied Cryptography and Network Security (ACNS). Springer, 2005.
10. W. Haga and M. Zviran. Question-and-answer passwords: an empirical evaluation. Information Systems, 16(3):335-343, 1991.
11. M. Jakobsson, E. Stolterman, S. Wetzel, and L. Yang. Love and authentication. In CHI '08: Proceeding of the twenty-sixth annual SIGCHI conference on Human factors in computing systems, pages 197-200, New York, NY, USA, 2008. ACM.
12. M. Just. Designing and evaluating challenge-question systems. IEEE Security and Privacy Magazine, 2(5):32-39, Sept.-Oct. 2004.
13. M. Mannan and P. van Oorschot. Security and usability: The gap in real-world online banking. In New Security Paradigms Workshop (NSPW'07), September 2007.
14. NYC Department of Health. "Health Department Announces Most Popular Dog Names and Breeds of 2005". Available online: http://www.nyc.gov/html/ doh/html/pr2006/pr122-06.html, December 27 2006.
15. Office of the Privacy Commissioner of Canada. "Guidelines for Identification and Authentication". Available Online. http://www.privcom. gc.ca/ information/ guide/ auth-061013-e.asp, October 2006.
16. L. O'Gorman, A. Bagga, and J. Bentley. Call Center Customer Verification by Query-Directed Passwords. In Financial Cryptography: 8th International Conference, FC 2004, Key West, FL, USA, February 9-12, 2004: Revised Papers. Springer, 2004.
17. L. Saad. Lincoln Resumes Position as Americans' Top-Rated President. Available online: http://www.gallup.com/poll/26608/Lincoln-Resumes-Position- Americans-TopRated-President.aspx, February 19 2007.
18. Social Security Administration. "Identity Theft and Your Social Security Number". SSA Publication No. 05-10064. Available online: http://www.socialsecurity.gov/pubs/10064.html, October 2007.
19. Social Security Administration. RSA Identity Verification. Available online. http://www.rsa.com/node.aspx?id=3347, 2008.
20. Social Security Administration. The SSN Numbering Scheme. Available online. http://www.socialsecurity.gov/history/ssn/geocard.html, Not Dated.