Quantifying Usability and Security in Authentication
Quantifying Usability and Security in Authentication
复制标题
量化身份验证的可用性和安全性
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
Saso Josimovski
中科院分区：
文献类型：
--
作者：
M. Mihajlov;B. Jerman;Saso Josimovski
在开发复杂的安全方法方面已经进行了大量的研究，其中身份验证机制被置于防御的第一线。由于这些机制基于用户行为，因此如果使用不当，可能无法实现预期目标。尽管可用性的影响，很少有研究一直集中在可用性和安全性之间的平衡，在认证机制评估这些系统的有效性。在本文中，我们提出了一个量化的方法来评估可用的安全认证机制。这种方法的目的是通过平衡可用性和安全性以及定义可量化的质量标准来指导给定环境中身份验证机制的评估过程。
Substantial research has been conducted in developing sophisticated security methods with authentication mechanisms placed in the front line of defense. Since these mechanisms are based on user conduct, they may not accomplish the intended objectives with improper use. Despite the influence of usability, little research has been focused on the balance between usability and security in authentication mechanisms when evaluating the effectiveness of these systems. In this paper we present a quantification approach for assessing usable security in authentication mechanisms. The purpose of this approach is to guide the evaluation process of authentication mechanisms in a given environment by balancing usability and security and defining quantifiable quality criteria.