CoChat
Sign Up
Cited by 15User Authentication and Security SystemsAdvanced Authentication Protocols SecurityInformation and Cyber Security

The DOI matches its Crossref record; 1 of the 1 references it cites were found in a registry or an index.

Evaluation of Risk-Based Re-Authentication Methods

Open access
Wiefling, Stephan, Patil, Tanvi, Dürmuth, Markus, Lo Iacono, Luigi·2020·IFIP Advances in Information and Communication Technology
DOI 10.1007/978-3-030-58201-2_19
Open this paper in CoChat — free accountOpen PDF

Overview

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1007/978-3-030-58201-2_19

Cites

1 of 1 references verified0 citation errors · 0 not checkable

Statistics

Verification

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Citations

Cites

  • Methods of coping with social desirability bias: A review

    Nederhof, A. J. (1985) · European Journal of Social Psychology · doi:10.1002/ejsp.2420150303 · Cited by 2,340 · cited 1×

    “e participants registered on the study website with username and password. The website was reachable via HTTPS via an internet domain not linked to our university to mitigate social desirability bias [22]. After registering, the participants tried logging into the website. After submitting the correct login credential…”

Show all 1 references

Research works printed but not linked: 18

  1. Abbey, J.D., Meloy, M.G.: Attention by design: using attention checks to detect inattentive respondents and improve data quality. JOM 53–56(1), 63–70 (2017) · DOI · Paper page
  2. Chan, J.C.: Response-order effects in Likert-type scales. Educ. Psychol. Measur. 51(3), 531–540 (1991) · DOI
  3. Crawford, H., Renaud, K.: Understanding user perceptions of transparent authentication on a mobile device. J. Trust Manag. 1(1), 1–28 (2014). https://doi.org/10.1186/2196-064X-1-7 · DOI
  4. De Cristofaro, E., Du, H., Freudiger, J., Norcie, G.: A comparative usability study of two-factor authentication. In: USEC 2014, February 2014 · DOI
  5. Doerfler, P., et al.: Evaluating login challenges as a defense against account takeover. In: WWW 2019 (2019) · DOI · Paper page
  6. Freeman, D., Jain, S., Dürmuth, M., Biggio, B., Giacinto, G.: Who are you? A statistical approach to measuring user authenticity. In: NDSS 2016, February 2016 · DOI · Paper page
  7. Golla, M., et al.: “What was that site doing with my Facebook password?": designing password-reuse notifications. In: CCS 2018 (2018) · DOI
  8. Grassi, P.A., et al.: Digital identity guidelines. Technical report NIST SP 800–63b (2017) · DOI
  9. Hara, K., et al.: A data-driven analysis of workers’ earnings on Amazon mechanical turk. In: CHI 2018 (2018) · DOI · Paper page
  10. Hartley, J.: Some thoughts on Likert-type scales. Int. J. Clin. Health Psychol. 14(1), 83–86 (2014) · DOI
  11. Kalton, G., Schuman, H.: The effect of the question on survey responses. J. Roy. Stat. Soc. Ser. A (Gen.) 145(1), 42 (1982) · DOI
  12. Miller, G.A.: WordNet. Commun. ACM 38(11), 39–41 (1995) · DOI · Paper page
  13. Mohammad, S.M., Turney, P.D.: Crowdsourcing a word-emotion association lexicon. Computat. Intell. 29(3), 436–465 (2013) · DOI
  14. Sheng, S., et al.: Who falls for phish?: a demographic analysis of phishing susceptibility and effectiveness of interventions. In: CHI 2010 (2010) · DOI · Paper page
  15. Thomas, K., et al.: Protecting accounts from credential stuffing with password breach alerting. In: USENIX Security 2019, August 2019
  16. Wiefling, S., Lo Iacono, L., Dürmuth, M.: Is this really you? An empirical study on risk-based authentication applied in the wild. In: Dhillon, G., Karlsson, F., Hedström, K., Zúquete, A. (eds.) SEC 2019. IAICT, vol. 562, pp. 134–148. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-22312-0_10 · DOI
  17. Yin, M., Suri, S., Gray, M.L.: Running out of time: the impact and value of flexibility in on-demand crowdwork. In: CHI 2018 (2018) · DOI
  18. Zajonc, R.B.: Attitudinal effects of mere exposure. JPSP 9(2, Pt.2), 1–27 (1968)

Cited by

Sorted by citations

  • Evaluating the Security Posture of Real-World FIDO2 Deployments

    Kuchhal, D., Saad, M., Oest, A., & Li, F. (2023) · Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3576915.3623063 · Cited by 22

    “We propose that the security community investigate augmenting existing authentication risk models [51, 63, 82, 84] to include additional risk signals on whether a FIDO2 authentication attempt was initiated by the intended user.”
    Background

Metadata

Authors
Wiefling, S., Patil, T., Dürmuth, M., & Lo Iacono, L.
Affiliations
  • Hochschule Bonn-Rhein-Sieg (DE)
  • University of North Carolina at Charlotte (US)
  • Ruhr University Bochum (DE)
Corresponding author
Wiefling, Stephan
ORCID
Venue
IFIP Advances in Information and Communication Technology
Publisher
Springer International Publishing
Published
2020
Volume
AICT-580
Pages
280-294
ISSN
  • 1868-422X (ISSN-L)
  • 1868-4238
DOI
10.1007/978-3-030-58201-2_19
OpenAlex
W3068296915
Cited by
15
References
1
Citations by year
2026: 1 · 2024: 2 · 2023: 5 · 2022: 3 · 2021: 4
FWCI
2.28
Type
conference paper
Language
en
Open access
Licence
Locations
  • IFIP advances in information and communication technology (publishedVersion)
  • arXiv (Cornell University) (submittedVersion)
  • HAL (submittedVersion, cc-by)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Keywords
risk-based authentication, re-authentication, email-based authentication, password authentication, credential stuffing, phishing, password guessing, usability, perceived security, user anxiety, time exposure

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review