Personal choice and challenge questions: a security and usability assessment

No abstract is available for this paper.

• Publication year

  2009

• Venue

  Symposium On Usable Privacy and Security

• Publication date

  2009-07-15

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/1572532.1572543
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Alice and Bob in Love : Cryptographic Communication Using Natural Entropy ( draft version )

  2009influential reference
• It's No Secret. Measuring the Security and Reliability of Authentication via “Secret” Questions

  2009cited by this paper
• Love and authentication

  2008cited by this paper
• Personal knowledge questions for fallback authentication: security questions in the era of Facebook

  2008cited by this paper
• Access control by testing for shared knowledge

  2008cited by this paper
• SP 800-57. Recommendation for Key Management, Part 1: General (revised)

  2007cited by this paper
• A large-scale study of web password habits

  2007influential reference
• Recommendation for Key Management, Part 1: General (Revision 3)

  2006cited by this paper
• A Mathematical Theory of Communication

  2006cited by this paper
• Security and Usability: Designing Secure Systems that People Can Use

  2005cited by this paper
• Messin' with Texas Deriving Mother's Maiden Names Using Public Records

  2005influential reference
• Call Center Customer Verification by Query-Directed Passwords

  2004cited by this paper
• Designing and evaluating challenge-question systems

  2004cited by this paper
• Error-tolerant password recovery

  2001cited by this paper
• Word Association Computer Passwords: The Effect of Formulation Techniques on Recall and Guessing Rates

  2000cited by this paper
• Protecting secret keys with personal entropy

  2000cited by this paper
• Pass-sentence - a new approach to computer code

  1994cited by this paper
• Question-and-answer passwords: an empirical evaluation

  1991influential reference
• A Comparison of Password Techniques for Multilevel Authentication Mechanisms

  1990influential reference

• SoK: Web Authentication and Recovery in the Age of End-to-End Encryption

  2025cites this paper
• "Lying makes me look suspicious": Users’ Perspectives and Analysis of Security Questions

  2025influential citation
• A Comparative Long-Term Study of Fallback Authentication Schemes

  2024influential citation
• The Authentication Gap: Higher Education's Widespread Noncompliance with NIST Digital Identity Guidelines

  2024cites this paper
• Enhancing smartphone security with human centric bimodal fallback authentication leveraging sensors

  2024cites this paper
• Measuring NIST Authentication Standards Compliance by Higher Education Institutions

  2024cites this paper
• Robust Multi-Factor Authentication for WSNs With Dynamic Password Recovery

  2024cites this paper
• User Verification System using Location-based Dynamic Questions for Account Recovery

  2024cites this paper
• AuthZit: Personalized Visual-Spatial and Loci-Tagging Fallback Authentication

  2024cites this paper
• SoK: Web Authentication in the Age of End-to-End Encryption

  2024cites this paper
• A Transcontinental Analysis of Account Remediation Protocols of Popular Websites

  2023cites this paper
• Evaluating knowledge-based security questions for fallback authentication

  2022cites this paper
• “Where did you first meet the owner?” – Exploring Usable Authentication for Smart Home Visitors

  2022cites this paper
• Understanding User's Behavior and Protection Strategy upon Losing, or Identifying Unauthorized Access to Online Account

  2021cites this paper
• N-for-1 Auth: N-wise Decentralized Authentication via One Authentication

  2021cites this paper
• Understanding users’ perceptions to improve fallback authentication

  2021influential citation
• Exploring the Acceptability of Graphical Passwords for People with Dyslexia

  2021cites this paper
• Recordkeeping and Relationships: Designing for Lifelong Information Rights

  2020cites this paper
• Developing and Validating a Novel Anonymous Method for Matching Longitudinal School-Based Data

  2020cites this paper
• “I cannot do anything”: User’s Behavior and Protection Strategy upon Losing, or Identifying Unauthorized Access to Online Account

  2020cites this paper
• What's in a Name?

  2020influential citation
• UIPA: User authentication method based on user interface preferences for account recovery process

  2020cites this paper
• PassTag: A Graphical-Textual Hybrid Fallback Authentication System

  2020influential citation
• Survey on Understanding Android Phone Sensor using Visual Cryptography

  2019cites this paper
• Modelling Anti-Phishing Authentication Ceremonies

  2019cites this paper
• Using Episodic Memory for User Authentication

  2019cites this paper
• Geographical Security Questions for Fallback Authentication

  2019cites this paper
• A Comparative Long-Term Study of Fallback Authentication Work in Progress

  2019cites this paper
• Geographic Hints for Passphrase Authentication

  2019cites this paper
• Web-sites password management (in)security: Evidence and remedies

  2019cites this paper
• FALLBACK AUTHENTICATION USING SMARTPHONES

  2019cites this paper
• Reflexive Memory Authenticator: A Proposal for Effortless Renewable Biometrics

  2019cites this paper
• A Longitudinal Study on Web-Sites Password Management (in)Security: Evidence and Remedies

  2019cites this paper
• Enhancing Security Of Secret Question By Using Smart phone Sensor

  2018cites this paper
• Devices Can Be Secure and Easy to Install on the Internet of Things

  2018cites this paper
• A Study on the Need of the Usable Security in the Corelation between IT Security and User Experience

  2018cites this paper
• Simple Nudges for Better Password Creation

  2018cites this paper
• Provably Secure Password Reset Protocol: Model, Definition, and Construction

  2018cites this paper
• Authentication for Cloud Services using Steganography

  2018cites this paper
• Systems and models for secure fallback authentication

  2018cites this paper
• Security questions education: exploring gamified features and functionalities

  2018cites this paper
• A study into the usability and security implications of text and image based challenge questions in the context of online examination

  2018influential citation
• A Spark is Enough in a Straw World: a Study of Websites Password Management in the Wild

  2018cites this paper
• Web password recovery - a necessary evil?

  2018influential citation
• Online Learning Integrity Approaches: Current Practices and Future Solutions.

  2017cites this paper
• A Serious Game Design: Nudging Users' Memorability of Security Questions

  2017influential citation
• Social Authentication Applications, Attacks, Defense Strategies and Future Research Directions: A Systematic Review

  2017cites this paper
• Understanding Smartphone Sensor and App Data for Enhancing the Security of Secret Questions

  2017cites this paper
• Changing users' security behaviour towards security questions: A game based learning approach

  2017cites this paper
• Involving Users in the Design of a Serious Game for Security Questions Education

  2017cites this paper
• Someone in Your Contact List: Cued Recall-Based Textual Passwords

  2017cites this paper
• A Model for Enhancing Human Behaviour with Security Questions: A Theoretical Perspective

  2017influential citation
• Social Cybersecurity: Reshaping Security Through An Empirical Understanding of Human Social Behavior

  2017cites this paper
• Authentication approach using one-time challenge generation based on user behavior patterns captured in transactional data sets

  2017cites this paper
• Security and Usability of Authentication by Challenge Questions in Online Examination

  2017influential citation
• A Gamified Approach to Improve Users' Memorability of Fall-back Authentication

  2017cites this paper
• Social cybersecurity: Understanding and leveraging social influence to increase security sensitivity

  2016cites this paper
• Social Cybersecurity : Understanding and Leveraging Social Influence to Improve End-User Security Sensitivity

  2016cites this paper
• Codes v. People: A Comparative Usability Study of Two Password Recovery Mechanisms

  2016cites this paper
• A diversity-based framework for dynamic password policy generation

  2016cites this paper
• Provably Secure Password Reset Protocol: Model, Definition, and Generic Construction

  2016cites this paper
• The Impact of Cues and User Interaction on the Memorability of System-assigned Random Passwords

  2016cites this paper
• Information Security Theory and Practice

  2016cites this paper
• Life-experience passwords (LEPs)

  2016cites this paper
• Leveraging autobiographical memory for two-factor online authentication

  2016influential citation
• Where Have You Been? Using Location-Based Security Questions for Fallback Authentication

  2015cites this paper
• THE IMPACT OF DIFFERENT CUES ON THE MEMORABILITY OF SYSTEM-ASSIGNED RECOGNITION-BASED TEXUAL PASSWORDS by KANIS FATEMA

  2015cites this paper
• Towards a Usable-Security Engineering Framework for Enhancing Software Development

  2015cites this paper
• A Study of Interpretation Effect of Passwords to Password Generation

  2015cites this paper
• Secrets, Lies, and Account Recovery: Lessons from the Use of Personal Knowledge Questions at Google

  2015cites this paper
• Assessing the User Experience of Password Reset Policies in a University

  2015cites this paper
• I Know What You Did Last Week! Do You?: Dynamic Security Questions for Fallback Authentication on Smartphones

  2015cites this paper
• The Impact of Cues and User Interaction on the Memorability of System-Assigned Recognition-Based Graphical Passwords

  2015cites this paper
• Leveraging Real-Life Facts to Make Random Passwords More Memorable

  2015cites this paper
• Usability of Activity-Based and Image-Based Challenge Questions in Online Student Authentication

  2015cites this paper
• PassApp: My App is My Password!

  2015cites this paper
• Evaluating security and usability of profile based challenge questions authentication in online examinations

  2014influential citation
• Q-A: Towards the Solution of Usability-Security Tension in User Authentication

  2014influential citation
• Role-playing game for studying user behaviors in security: A case study on email secrecy

  2014cites this paper
• Issues in user authentication using security questions

  2014influential citation
• Privacy and usability of image and text based challenge questions authentication in online examination

  2014cites this paper
• A Location-Based Authentication System Leveraging Smartphones

  2014cites this paper
• Rethinking Security Requirements in RE Research Technical Report

  2014cites this paper
• Usable Security: History, Themes, and Challenges

  2014cites this paper
• On User Perception of Authentication in Networks

  2014cites this paper
• Authentication Using Private Weighted Questioning

  2014cites this paper
• Security Analysis on Password Authentication System of Web Sites

  2014cites this paper
• Voice authentication using short phrases: Examining accuracy, security and privacy issues

  2013cites this paper
• Personal Privacy and the Web of Linked Data

  2013cites this paper
• Exploiting Human Factors in User Authentication

  2013cites this paper
• CloudSweeper: enabling data-centric document management for secure cloud archives

  2013cites this paper
• Exploring capturable everyday memory for autobiographical authentication

  2013cites this paper
• On the ecological validity of a password study

  2013influential citation
• The Impact of Frequent Use Email When Creating Account at the Websites on the Users Privacy and Security

  2013cites this paper
• Usability engineering for code-based multi-factor authentication

  2013cites this paper
• An Hybrid Text-Image Based Authentication for Cloud Services

  2013cites this paper
• An ecologically valid evaluation of an observation-resilient graphical authentication mechanism

  2013cites this paper
• With vaulted voice verification my voice is my key

  2013cites this paper
• Investigating User Authentication in the Context of Older Adults

  2012cites this paper
• Improving Online Account Security: Implementing Policy and Process Changes

  2012cites this paper