Quantifying the security of preference-based authentication
Quantifying the security of preference-based authentication
复制标题
量化基于偏好的身份验证的安全性
DOI：
--
复制
发表时间：
2008
期刊：
影响因子：
--
通讯作者：
S. Wetzel
中科院分区：
文献类型：
--
作者：
M. Jakobsson;Liu Yang;S. Wetzel
我们描述了一种旨在解决密码重置的长期问题的技术：安全性和成本。在我们的方法中，使用用户的首选项对用户进行身份验证。实验和仿真结果表明，该方法安全、快速、易用。特别是，用户完成设置的平均时间约为两分钟，而身份验证过程仅需该时间的一半。对于我们选择的参数，系统的假阴性率基本上是0%。对于知道所用问题答案的频率分布的对手，系统的错误正确率估计不到0.5%，而对于没有这些信息的对手，错误正确率接近0%。这两项预估都有5%的显著水平。
We describe a technique aimed at addressing longstanding problems for password reset: security and cost. In our approach, users are authenticated using their preferences. Experiments and simulations have shown that the proposed approach is secure, fast, and easy to use. In particular, the average time for a user to complete the setup is approximately two minutes, and the authentication process takes only half that time. The false negative rate of the system is essentially 0% for our selected parameter choice. For an adversary who knows the frequency distributions of answers to the questions used, the false positive rate of the system is estimated at less than half a percent, while the false positive rate is close to 0% for an adversary without this information. Both of these estimates have a significance level of 5%.