Real-time Internet Authentication Weakness Inspection Service

点击翻译按钮获取中文摘要

End users often choose poor quality secrets for their passwords, and frequently re-use them across multiple applications. This means that compromise of an application from one system can have knock on impact to other applications through credential stuffing attacks. Technically, this could be mitigated to some degree with two factor authentication, but application providers risk subscriber drop off (particularly when dealing with the public) if they add logon complexity, and are therefore reluctant to enforce additional authentication steps.This project will aim to defuse the potential for credential stuffing / password reuse attacks by delivering a real-time, highly secure leaked credential checking protocol and service which will enhance the security of application authentication systems without the need to add additional verification steps for the user.