权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

CAREER: Enhancing Mobile Authentication by Measuring the Authentication Life-Cycle

职业：通过衡量身份验证生命周期来增强移动身份验证

基本信息

批准号：
1845300
负责人：
Adam Aviv
金额：
$ 70万
依托单位：
George Washington University
依托单位国家：
美国
项目类别：
Continuing Grant
财政年份：
2019
资助国家：
美国
起止时间：
2019-10-01 至 2024-09-30
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1845300&HistoricalAwards=false
关键词：
CAREER Enhancing Mobile Authentication Measuring

项目摘要

This CAREER research focuses on human factors in authentication using mobile devices. Mobile authentication is a crucial component of authentication, especially as mobile devices become ever more connected to the broader security ecosystem. A major concern is how users authenticate as they use their devices over months or years. This research will involve empirical studies of the choices and actions users take over time. Qualitative and quantitative measures will be employed to better understand user mental models, perceptions, and behaviors related to mobile authentication. The overall goal is to understand the life-cycle of authentication on mobile devices. The outcomes of this work will drive the design and implementation of mobile authentication, and policies surrounding mobile authentication. The research will help to mitigate or prevent security attacks on mobile devices, and lead to better security and privacy of data in mobile devices.Empirical measurements and improvements to mobile authentication have the potential to provide significant intellectual impact and lay the ground work for transformative technologies that improve the way we choose and use authenticators on our mobile devices. This project will accomplish that in two key ways. First, the research makes contributions to the study of user behavior as it unfolds over time, and how that behavior is affected by device use, context, and perceptions. Second, measures of life-cycle events in mobile authentication will be used to understand how behavior shifts over time. The research will also expand the typically-tested populations of students and online users to understand how other user populations, such as older adults, approach authentication and may require different solutions or interventions. The outcome of this work will fill important knowledge gaps regarding the upgrade cycle of mobile devices and our understanding of mobile authentication selection, leading to the design of new policies, procedures, and systems for mobile authentication. Students will be involved at all stages of the research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

这项职业研究的重点是使用移动设备进行身份验证时的人为因素。移动身份验证是身份验证的重要组成部分，尤其是在移动设备越来越多地连接到更广泛的安全生态系统的情况下。一个主要的问题是用户在几个月或几年的时间里使用他们的设备时如何进行身份验证。这项研究将涉及对用户随着时间的推移而做出的选择和采取的行动的实证研究。将采用定性和定量相结合的方法，更好地了解与移动身份验证相关的用户心理模型、感知和行为。总体目标是了解移动设备上身份验证的生命周期。这项工作的成果将推动移动身份验证的设计和实施，以及围绕移动身份验证的政策。这项研究将有助于缓解或防止对移动设备的安全攻击，并导致移动设备中数据的更好安全和隐私。移动身份验证的经验测量和改进有可能提供重大的智力影响，并为改进我们在移动设备上选择和使用验证器的方式的变革性技术奠定基础。这个项目将通过两个关键方式实现这一目标。首先，这项研究有助于研究用户行为随着时间的推移而展开，以及该行为如何受到设备使用、环境和感知的影响。其次，将使用移动身份验证中生命周期事件的测量来了解行为如何随时间变化。这项研究还将扩大经过典型测试的学生和在线用户群体，以了解其他用户群体，如老年人，如何进行身份验证，并可能需要不同的解决方案或干预措施。这项工作的结果将填补有关移动设备升级周期和我们对移动身份验证选择的理解的重要知识空白，从而导致设计新的移动身份验证政策、程序和系统。学生将参与研究的所有阶段。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

期刊论文数量（15）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

"In Eighty Percent of the Cases, I Select the Password for Them": Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya

“在百分之八十的情况下，我会为他们选择密码”：肯尼亚网吧的安全和隐私挑战、建议和机遇

DOI：
发表时间：
2023
期刊：
2023 IEEE Symposium on Security and Privacy
影响因子：
0
作者：
Munyendo, Collins;Acar, Yasemin;Aviv, Adam J.
通讯作者：
Aviv, Adam J.

“In Eighty Percent of the Cases, I Select the Password for Them”: Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya

– 在百分之八十的情况下，我为他们选择密码 –：肯尼亚网吧的安全和隐私挑战、建议和机遇

DOI：
发表时间：
2023
期刊：
2023 IEEE Symposium on Security and Privacy
影响因子：
0
作者：
Collins Munyendo;Yasemin Acar;and Adam J. Aviv
通讯作者：
and Adam J. Aviv

User Perceptions of Five-Word Passwords

DOI：
10.1145/3564625.3567981
发表时间：
2022-12
期刊：
Proceedings of the 38th Annual Computer Security Applications Conference
影响因子：
0
作者：
Xiaoyuan Wu;Collins W. Munyendo;Eddie Cosic;Genevieve A. Flynn;Olivia Legault;Adam J. Aviv
通讯作者：
Xiaoyuan Wu;Collins W. Munyendo;Eddie Cosic;Genevieve A. Flynn;Olivia Legault;Adam J. Aviv

Why Users (Don't) Use Password Managers at a Large Educational Institution

为什么用户（不）在大型教育机构使用密码管理器

DOI：
发表时间：
2022
期刊：
31st USENIX Security Symposium (USENIX Security 22
影响因子：
0
作者：
Mayer, Peter;Munyendo, Collins W.;Mazurek, Michelle L.;Aviv, Adam J.
通讯作者：
Aviv, Adam J.

Twice as Nice? A Preliminary Evaluation of Double Android Unlock Patterns

尼斯的两倍？

DOI：
10.1145/3334480.3382922
发表时间：
2020
期刊：
CHI EA '20: Extended Abstracts of the 2020 CHI Conference on Human Factors in Computing System
影响因子：
0
作者：
Forman, Timothy J.;Roche, Daniel S.;Aviv, Adam J.
通讯作者：
Aviv, Adam J.