Strathprints Home | Open Access | Browse | Search | User area | Copyright | Help | Library Home | SUPrimo

Towards authentication via selected extraction from electronic personal histories

Nosseir, A. and Terzis, Sotirios (2011) Towards authentication via selected extraction from electronic personal histories. In: Enterprise Information Systems. Lecture Notes in Business Information Processing, 73 . Springer, pp. 571-586. ISBN 9783642198014

Full text not available in this repository. (Request a copy from the Strathclyde author)

Abstract

Authentication via selected extraction from electronic personal histories is a novel question-based authentication technique. This paper first presents a study using academic personal web site data that investigated the effect of using image-based authentication questions. By assessing the impact on both genuine users and attackers the study concluded that from an authentication point of view (a) an image-based representation of questions is beneficial; (b) a small increase in the number of distracters/options in closed questions is positive; and (c) the ability of attackers, close to genuine users, to answer correctly with high confidence, genuine users’ questions is limited. Second, the paper presents the development of a web-based prototype for automated generation of image-based authentication questions. The prototype makes clear that although possible to largely automate the generation of authentication questions, this requires significant engineering effort and further research. These results are encouraging for the feasibility of the technique.

Item type: Book Section
ID code: 36973
Notes: e-isbn; 978-3-642-19802-1
Keywords: electronic personal histories , authentication , computer science , enterprise information systems, security usability, Electronic computers. Computer science, Computational Theory and Mathematics
Subjects: Science > Mathematics > Electronic computers. Computer science
Department: Faculty of Science > Computer and Information Sciences
Related URLs:
Depositing user: Pure Administrator
Date Deposited: 24 Jan 2012 09:22
Last modified: 06 Sep 2014 07:29
URI: http://strathprints.strath.ac.uk/id/eprint/36973

Actions (login required)

View Item