Codes v. People: A Comparative Usability Study of Two Password Recovery Mechanisms
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F16%3A00091209" target="_blank" >RIV/00216224:14330/16:00091209 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1007/978-3-319-45931-8_3" target="_blank" >http://dx.doi.org/10.1007/978-3-319-45931-8_3</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1007/978-3-319-45931-8_3" target="_blank" >10.1007/978-3-319-45931-8_3</a>
Alternative languages
Result language
angličtina
Original language name
Codes v. People: A Comparative Usability Study of Two Password Recovery Mechanisms
Original language description
Password recovery is a critical, and often overlooked, requirement of account management. Currently popular solutions, such as security questions and out-of-band communications, have recognized security and usability issues. In this paper we evaluate two alternate recovery solutions considered by our industrial partner, using backup codes and trusted people, in order to determine their suitability as a viable password recovery solution. In this paper we focus on the usability evaluation of these two representative recovery methods, and not on the specifics of their design – while our evaluation results do indirectly point to general design enhancements. Our study determined that participants felt that backup codes (implemented as a QR-code in our solution) offer levels of usability and security that are acceptable to users for securing their “ordinary” accounts. For accounts perceived to require more security (e.g.
Czech name
—
Czech description
—
Classification
Type
D - Article in proceedings
CEP classification
IN - Informatics
OECD FORD branch
—
Result continuities
Project
—
Continuities
S - Specificky vyzkum na vysokych skolach
Others
Publication year
2016
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Article name in the collection
Information Security Theory and Practice: 10th IFIP WG 11.2 International Conference, WISTP 2016, Heraklion, Crete, Greece, September 26--27, 2016, Proceedings
ISBN
9783319459301
ISSN
0302-9743
e-ISSN
—
Number of pages
16
Pages from-to
35-50
Publisher name
Springer
Place of publication
Švýcarsko
Event location
Herakleion
Event date
Jan 1, 2016
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—