URIA

Uria Logo
Usability of Risk-based Implicit Authentication
Fachbereiche und Institute: 
Informatik, Institut für Cyber Security und Privacy
Von: 
01.04.2018
to
31.08.2021
Projekt-Webseite: 
URIA

Projektbeschreibung

Das Forschungsprojekt URIA beschäftigt sich mit der weit verbreiteten passwortbasierten Authentifizierung – sei es bei E-Mail-Diensten, Online-Shops oder Online-Banking. Wohl jeder kennt die Qual gute Passwörter zu wählen und vor allem zu behalten. Darüber hinaus bergen passwortgesicherte Systeme hohe Sicherheitsrisiken, da sie schnell zu „knacken“ sind. Passwortbasierte Authentifizierung hat daher nicht nur Schwächen in der Usability sondern auch in der Sicherheit. Risikobasierte Authentifizierung hat hingegen das Potential die Sicherheit zu erhöhen ohne die Usability zu beeinträchtigen.
 

Projektleitung an der H-BRS

Prof. Dr. Luigi Lo Iacono

Informationssicherheit
Daten- und Anwendungssicherheit
Hochschule Bonn-Rhein-Sieg
E-Mail: 
luigi.lo_iacono [at] h-brs.de

Sankt Augustin

Raum: 
C 210
Telefon: 
+49 2241 865 9557

Publikationen

URIA - Usability of Risk-based Implicit Authentication

2021 | 2020 | 2019

2021

Stephan Wiefling, Jan Tolsdorf, Luigi Lo Iacono: Privacy Considerations for Risk-Based Authentication Systems. In: 2021 International Workshop on Privacy Engineering (IWPE '21), co-located with 6th IEEE European European Symposium on Security and Privacy (EuroS&P '21). September 7, 2021. Vienna, Austria (Online), 2021, S. 320-327 (The open access version will be available 12 months after publication on the publisher's website.)
doi:10.1109/EuroSPW54576.2021.00040 urn:nbn:de:hbz:1044-opus-58417 BibTeX | RIS

Stephan Wiefling, Jan Tolsdorf, Luigi Lo Iacono: Privacy Considerations for Risk-Based Authentication Systems. In: 2021 International Workshop on Privacy Engineering (IWPE '21), co-located with 6th IEEE European European Symposium on Security and Privacy (EuroS&P '21). September 7, 2021. Vienna, Austria (Online), 2021
PDF Download (postprint version) BibTeX | RIS

Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono: Verify It's You: How Users Perceive Risk-based Authentication. In: IEEE Security & Privacy, 19(6), 2021, S. 47-57
PDF Download (postprint version) doi:10.1109/MSEC.2021.3077954 urn:nbn:de:hbz:1044-opus-54912 BibTeX | RIS

Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono: What's in Score for Website Users: A Data-driven Long-term Study on Risk-based Authentication Characteristics. In: 25th International Conference on Financial Cryptography and Data Security (FC '21). March 01-05, 2021. Pre-Proceedings, 2021
PDF Download (pre-proceedings version) URL arXiv urn:nbn:de:hbz:1044-opus-53053 BibTeX | RIS

2020

Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono: More Than Just Good Passwords? A Study on Usability and Security Perceptions of Risk-based Authentication. In: 36th Annual Computer Security Applications Conference (ACSAC '20). December 07-11, 2020, 2020, S. 203-218
PDF Download (postprint version) doi:10.1145/3427228.3427243 URL arXiv urn:nbn:de:hbz:1044-opus-50707 BibTeX | RIS

Stephan Wiefling, Tanvi Patil, Markus Dürmuth, Luigi Lo Iacono: Evaluation of Risk-based Re-Authentication Methods. In: Hölbl, Rannenberg et al. (Eds.): ICT Systems Security and Privacy Protection. 35th IFIP TC 11 International Conference, SEC 2020, Maribor, Slovenia, September 21–23, 2020, Proceedings, 2020, S. 280-294
PDF Download (postprint version) urn:nbn:de:hbz:1044-opus-49521 URL doi:10.1007/978-3-030-58201-2_19 arXiv BibTeX | RIS

Stephan Wiefling: Usability, Sicherheit und Privatsphäre von risikobasierter Authentifizierung. In: Reinhardt, Langweg et al. (Hg.): Sicherheit 2020, 2020, S. 129-134
doi:10.18420/sicherheit2020_12 BibTeX | RIS

2019

Stephan Wiefling, Luigi Lo Iacono, Markus Dürmuth: Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild. In: Dhillon, Karlsson et al. (Eds.): ICT Systems Security and Privacy Protection. 34th IFIP TC 11 International Conference, SEC 2019, Lisbon, Portugal, June 25-27, 2019, Proceedings, 2019, S. 134-148
doi:10.1007/978-3-030-22312-0_10 URL arXiv BibTeX | RIS

Stephan Wiefling, Nils Gruschka, Luigi Lo Iacono: Even Turing Should Sometimes Not Be Able To Tell: Mimicking Humanoid Usage Behavior for Exploratory Studies of Online Services. In: Askarov, Hansen et al. (Eds.): Secure IT Systems. 24th Nordic Conference, NordSec 2019, Aalborg, Denmark, November 18–20, 2019, Proceedings, 2019, S. 188-203
doi:10.1007/978-3-030-35055-0_12 URL BibTeX | RIS

Alle Forschungsprojekte