.png){kind=icon}
返回
Using Episodic Memory for User Authentication
.png){kind=icon}
PRE
AI
DOI：10.1145/3308992.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Passwords are widely used for user authentication, but they are often difficult for a user to recall, easily cracked by automated programs, and heavily reused. Security questions are also used for secondary authentication. They are more memorable than passwords, because the question serves as a hint to the user, but they are very easily guessed. We propose a new authentication mechanism, called life-experience passwords (LEPs). Sitting somewhere between passwords and security questions, an LEP consists of several facts about a user-chosen life event-such as a trip, a graduation, a wedding, and so on. At LEP creation, the system extracts these facts from the user's input and transforms them into questions and answers. At authentication, the system prompts the user with questions and matches the answers with the stored ones. We show that question choice and design make LEPs much more secure than security questions and passwords, while the question-answer format promotes low password reuse and high recall. Specifically, we find that: (1) LEPs are 10(9)-10(14) x stronger than an ideal, randomized, eight-character password; (2) LEPs are up to 3x more memorable than passwords and on par with security questions; and (3) LEPs are reused half as often as passwords. While both LEPs and security questions use personal experiences for authentication, LEPs use several questions that are closely tailored to each user. This increases LEP security against guessing attacks. In our evaluation, only 0.7% of LEPs were guessed by casual friends, and 9.5% by family members or close friends-roughly half of the security question guessing rate. On the downside, LEPs take around 5x longer to input than passwords. So, these qualities make LEPs suitable for multi-factor authentication at high-value servers, such as financial or sensitive work servers, where stronger authentication strength is needed.
Keyword:
Authentication
password
security question
usability
template
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
A
IF:
2.8
论文数:
291
被引数:
770
机构
引用论文
分享收藏The role of cardiopulmonary baroreceptors during the forearm vasodilatation response to mental stress在心理应激诱导的前臂血管舒张反应中，心肺压力感受器的作用
PREAI
分享收藏The efficacy and safety of combined pulsed and conventional radiofrequency treatment of refractory cases of idiopathic trigeminal neuralgia: a retrospective study联合脉冲和常规射频治疗难治性特发性三叉神经痛的疗效与安全性：一项回顾性研究
PREAI
分享收藏Conserved Role of a Complement-like Protein in Phagocytosis Revealed by dsRNA Knockout in Cultured Cells of the Mosquito, Anopheles gambiae.png)
Cell
OAAI
CellIF0
OAAI分享收藏Efficacy and safety of continuous radiofrequency thermocoagulation plus pulsed radiofrequency for treatment of V1 trigeminal neuralgia连续射频热凝联合脉冲射频治疗V1三叉神经痛的疗效与安全性MedicineOAAI
MedicineIF0
OAAI分享收藏
查看更多内容