When you think about how far and fast computer science has progressed in recent years, it's
not hard to conclude that a seven-year old handbook may fall a little short of the kind of …

Computer access control is an ongoing challenge. Left to themselves, computers tend to
treat one user no differently than another. Computers use authentication to confidently …

Textual passwords are often the only mechanism used to authenticate users of a networked
system. Unfortunately, many passwords are easily guessed or cracked. In an attempt to …

Challenging the conventional wisdom that users cannot remember cryptographically-strong
secrets, we test the hypothesis that users can learn randomly-assigned 56-bit codes …

Authenticating humans to computers remains a notable weak point in computer security
despite decades of effort. Although the security research community has explored dozens of …

An important requirement of any information management system is to protect information
against improper disclosure or modi cation (known as con dentiality and integrity …

This paper presents a comprehensive survey of recent literature on the topic of password
dictionaries for alphanumeric and graphical user authentication approaches including some …

This paper compares three random password generation schemes, describing and
analyzing each. It also reports the results of a small study testing the quality of the …

Security and usability are two essential aspects of a system, but they usually move in
opposite directions. Sometimes, to achieve security, usability has to be compromised, and …

In this work, we design and evaluate LociMotion, a training interface to learn a strong
authentication secret in a single session. LociMotion automatically takes a random …