It's not what you know, but who you know: A social approach to last-resort authentication

Conference on Human Factors in Computing Systems - Proceedings

Volumn , Issue , 2009, Pages 1983-1992

  Schechter, Stuart ^a   Egelman, Serge ^a   Reeder, Robert W ^b  

^a MICROSOFT RESEARCH   (United States)

^b MICROSOFT   (United States)

Author keywords

Privacy; Security; Usability testing and evaluation

Indexed keywords

AUTHENTICATION MECHANISMS; AUTHENTICATION SYSTEMS; PHONE-BASED; SECURITY; SECURITY AND RELIABILITIES; USABILITY TESTING AND EVALUATION;

DATA PRIVACY; ELECTRONIC MAIL; HUMAN ENGINEERING; TELEPHONE SETS; TELEPHONE SYSTEMS;

AUTHENTICATION;

EID: 84892469732     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1518701.1519003     Document Type: Conference Paper

References (14)

1. J. Brainard, A. Juels, R. L. Rivest, M. Szydlo, and M. Yung. Fourth-factor authentication: somebody you know. In CCS '06: Proceedings of the 13th ACM Conference on Computer and Communications Security-, pages 168-178, New York, NY, USA, 2006. ACM.
2. T. Bridis. Hacker impersonated Palin, stole e-mail password, Sept. 18, 2008. Associated Press.
3. S. Brostoff and A. M. Sasse. Ten strikes and you're out: Increasing the number of login attempts can improve password usability. In Proceedings of CHI 2003 Workshop on HCI and Security Systems, 2003.
4. CommonwealthBank. NetBank NetCode SMS, 2008. http://www.commbank.com.au/ netbank/netcodesms/.
5. CREDANT Technologies. Mountains of mobiles left in the back of New York cabs, 16, 2008. http://www.credant.com/mountains-of-mobiles-left-in-the-back-of- new-york-cabs.html.
6. Google Inc. Contact Us - Google Accounts Help, 2008. http://www.google. com/support/accounts/bin/request.py?hl=en&contact-type=ara&ctx= accounts&uses-apps=no&product=other&submit=Continue.
7. M. Jakobsson, E. Stolterman, S. Wetzel, and L. Yang. Love and authentication. In CHI '08: Proceeding of the Twenty-Sixth Annual SIGCHI Conference on Human Factors in Computing Systems, pages 197-200, New York, NY, USA, 2008. ACM.
8. Microsoft Corporation. Complete the form below for Windows Live ID validation, 2008. https://support.live.com/eform.aspx?productKey= wlidvalidation&ct=eformcs&scrx=1.
9. J. Podd, J. Bunnell, and R. Henderson. Cost-effective computer security: Cognitive and associative passwords. In OZCHI '96: Proceedings of the 6th Australian Conference on Computer-Human Interaction (OZCHI '96), page 304, Washington, DC, USA, 1996. IEEE Computer Society.
10. A. Rabkin. Personal knowledge questions for fallback authentication: security questions in the era of facebook. In SOUPS '08: Proceedings of the 4th Symposium on Usable Privacy and Security, pages 13-23, New York, NY, USA, 2008. ACM.
11. SafeNet, Inc. 2004 annual password survey results, 2005. http://www.safenet-inc.com/news/view.asp?newsJD=239.
12. S. Schechter, A. J. Bernheim Brush, and S. Egelman. It's no secret: Measuring the security and reliability of authentication via 'secret' questions. In submission.
13. K.-P. L. Vu, R. W. Proctor, A. Bhargav-Spantzel, B.-L. B. Tai, J. Cook, and E. E. Schultz. Improving password security and memorability to protect personal and organizational information. Int. J. Hum.-Comput. Stud., 65(8):744-757, 2007.
14. M. Zviran and W. J. Haga. User authentication by cognitive passwords: an empirical assessment. In JCIT: Proceedings of the Fifth Jerusalem Conference on Information technology, pages 137-144, Los Alamitos, CA, USA, 1990. IEEE Computer Society Press.