URIA

uria-logo-teaser_1.jpg

Research project at a glance

The research project URIA inspects the widely deployed password-based authentication. Nearly everyone knows the difficulty of choosing and, especially, remembering good passwords. Password-secured systems also inhere high security risks due to its fast "crackability". Hence, password-based authentication has weaknesses in terms of usability as well as security. In contrast to that, Risk-based authentication has the potential of improving security without degrading usability.
uria-logo-teaser_1.jpg

Departments and Instituts

Department of Computer Science

Period

01.04.2018 to 31.08.2021

Website

URIA

Project manager at H-BRS

Project Description

The research project URIA inspects the widely deployed password-based authentication. Nearly everyone knows the difficulty of choosing and, especially, remembering good passwords. Password-secured systems also inhere high security risks due to its fast "crackability". Hence, password-based authentication has weaknesses in terms of usability as well as security. In contrast to that, Risk-based authentication has the potential of improving security without degrading usability.

Publications

2021 | 2020 | 2019

2021

Stephan Wiefling, Jan Tolsdorf, Luigi Lo Iacono: Privacy Considerations for Risk-Based Authentication Systems. In: 2021 International Workshop on Privacy Engineering (IWPE '21), co-located with 6th IEEE European European Symposium on Security and Privacy (EuroS&P '21). September 7, 2021. Vienna, Austria (Online), 2021, S. 320-327
PDF Download (CC BY 4.0) doi:10.1109/EuroSPW54576.2021.00040 urn:nbn:de:hbz:1044-opus-58417 BibTeX | RIS

Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono: Verify It's You: How Users Perceive Risk-based Authentication. In: IEEE Security & Privacy, 19(6), 2021, S. 47-57
PDF Download (postprint version) doi:10.1109/MSEC.2021.3077954 urn:nbn:de:hbz:1044-opus-54912 BibTeX | RIS

Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono: What's in Score for Website Users: A Data-driven Long-term Study on Risk-based Authentication Characteristics. Preprint, 2021
PDF Download (pre-proceedings version) URL arXiv urn:nbn:de:hbz:1044-opus-53053 BibTeX | RIS

2020

Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono: More Than Just Good Passwords? A Study on Usability and Security Perceptions of Risk-based Authentication. In: 36th Annual Computer Security Applications Conference (ACSAC '20). December 07-11, 2020, 2020, S. 203-218
PDF Download (postprint version) doi:10.1145/3427228.3427243 URL arXiv urn:nbn:de:hbz:1044-opus-50707 BibTeX | RIS

Stephan Wiefling, Tanvi Patil, Markus Dürmuth, Luigi Lo Iacono: Evaluation of Risk-based Re-Authentication Methods. In: Hölbl, Rannenberg et al. (Eds.): ICT Systems Security and Privacy Protection. 35th IFIP TC 11 International Conference, SEC 2020, Maribor, Slovenia, September 21–23, 2020, Proceedings, 2020, S. 280-294
PDF Download (postprint version) urn:nbn:de:hbz:1044-opus-49521 URL doi:10.1007/978-3-030-58201-2_19 arXiv BibTeX | RIS

Stephan Wiefling: Usability, Sicherheit und Privatsphäre von risikobasierter Authentifizierung. In: Reinhardt, Langweg et al. (Hg.): Sicherheit 2020, 2020, S. 129-134
doi:10.18420/sicherheit2020_12 BibTeX | RIS

2019

Stephan Wiefling, Luigi Lo Iacono, Markus Dürmuth: Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild. In: Dhillon, Karlsson et al. (Eds.): ICT Systems Security and Privacy Protection. 34th IFIP TC 11 International Conference, SEC 2019, Lisbon, Portugal, June 25-27, 2019, Proceedings, 2019, S. 134-148
doi:10.1007/978-3-030-22312-0_10 URL arXiv BibTeX | RIS

Stephan Wiefling, Nils Gruschka, Luigi Lo Iacono: Even Turing Should Sometimes Not Be Able To Tell: Mimicking Humanoid Usage Behavior for Exploratory Studies of Online Services. In: Askarov, Hansen et al. (Eds.): Secure IT Systems. 24th Nordic Conference, NordSec 2019, Aalborg, Denmark, November 18–20, 2019, Proceedings, 2019, S. 188-203
doi:10.1007/978-3-030-35055-0_12 URL BibTeX | RIS