—Knowledge-based passwords are still the most dom- inant authentication method for securing digital platforms and services, in spite of the emergence of alternative systems such as token-based and biometric systems. This method has remained the most popular one mostly because of its usability, compatibility, affordability of implementation, and user familiarity. However, the main challenge of knowledge-based password schemes lies in creating passwords that provide a balance between memorability and security. This research aimed to compare various knowledge- based schemes in order to establish a strategy that provided high memorability and resilience to most cyberattacks. The overview of this research identifies areas of knowledge-based passwords for further research and enhances the methodology that helps to offer insight into usable, secure, and sustainable authentication approaches. Future work has been recommended to explore the major features and drawbacks of recognition-based textual passwords because this method provides the usability and security benefits of graphical passwords with the familiarity of textual passwords.

/pdf/usability-and-security-of-knowledge-based-authentication-2gvbfzls.pdf

Usability and Security of Knowledge-based Authentication Systems: A State-of-the-Art Review

Passwords are used consistently in our everyday lives. Whether it’s from logging in to our smart phones, our computers, accessing our bank, etc. We need to use passwords to protect everything important to us, and to keep our information safe. If our passwords are known by a malicious party, we could lose not only access to our personal data, but potentially lose everything through identity theft. While it’s important to change our passwords occasionally, could requiring changes too frequently actually make our passwords worse. This paper highlights the weakest links of cyber security, the user’s mistakes when choosing their passwords. Additionally, this paper provides different ways of password security in both personal, and business use.

Donald K. Davis

Papers

Password Security: What Are We Doing Wrong?