swiefling, 2 months ago German

Worried about account takeover? You're not alone! Attackers often misuse the "forgot password" mechanism to hack us.

Our latest study revealed a game-changer to counter this: Risk-Based Account Recovery! Platforms like Google now tailor recovery mechanisms based on your device and location context, making it hard for bad actors but easy for legitimate users.

Read more in our paper: https://riskbasedauthentication.org/state-of-practice/account-recovery/

#CyberSecurity #InfoSec #HCI #UX #Password #Authentication #Research #OpenAccess

Is It Really You Who Forgot the Password? When Account Recovery Meets Risk-Based Authentication Abstract Risk-based authentication (RBA) is used in online services to protect user accounts from unauthorized takeover. RBA commonly uses contextual features that indicate a suspicious login attempt when the characteristic attributes of the login context deviate from known and thus expected values. Previous research on RBA and anomaly detection in authentication has mainly focused on the login process. However, recent attacks have revealed vulnerabilities in other parts of the authentication process, specifically in the account recovery function. Consequently, to ensure comprehensive authentication security, the use of anomaly detection in the context of account recovery must also be investigated. This paper presents the first study to investigate risk-based account recovery (RBAR) in the wild. We analyzed the adoption of RBAR by five prominent online services (that are known to use RBA). Our findings confirm the use of RBAR at Google, LinkedIn, and Amazon. Furthermore, we provide insights into the different RBAR mechanisms of these services and explore the impact of multi-factor authentication on them. Based on our findings, we create a first maturity model for RBAR challenges. The goal of our work is to help developers, administrators, and policy-makers gain an initial understanding of RBAR...

• x

  Image

  Upload file From url

  Image alternative text
• DeutschEnglish-------------------AfarAbkhazianAchineseAcoliAdangmeAdygheAvestanTunisian ArabicAfrikaansAfrihiliAghemAinuAkanAkkadianAlabamaAleutGheg AlbanianSouthern AltaiአማርኛAragoneseOld EnglishOboloAngikaالعربيةAramaicMapucheAraonaArapahoAlgerian ArabicNajdi ArabicArawakMoroccan ArabicEgyptian Arabicঅসমীয়াAsuAmerican Sign LanguageAsturianAtikamekwAvaricKotavaAwadhiAymaraazərbaycanBashkirBaluchiBalineseBavarianBasaaBamunBatak TobaGhomalaбеларускаяBejaBembaBetawiBenaBafutBadagaбългарскиHaryanviWestern BalochiBhojpuriBislamaBikolBiniBanjarKomSiksikáAniiTai Dambamanakanবাংলাབོད་སྐད་BishnupriyaBakhtiaribrezhonegBrajBrahuiBodobosanskiAkooseBuriatBugineseBuluBlinMedumbacatalàCaddoCaribCayugaAtsamChakmaнохчийнCebuanoChigaChamorroChibchaChagataiChuukeseMariChinook JargonChoctawChipewyanCherokeeCheyenneChickasawCentral KurdishChilcotinCorsicanCopticCapiznonCreeMichifCrimean TatarSouthern East CreePlains CreeNorthern East CreeMoose CreeCarolina AlgonquianSeselwa Creole FrenchčeštinaKashubianSwampy CreeChurch SlavicчӑвашWoods CreeCymraegdanskDakotaDargwaTaitaDelawareSlaveDogribDinkaZarmaDogriLower SorbianCentral DusunDualaMiddle DutchDivehiJola-FonyiDyulaརྫོང་ཁDazagaEmbuEʋegbeEfikEmilianAncient EgyptianEkajukΕλληνικάElamiteMiddle EnglishEsperantoespañolCentral YupikeestieuskaraEwondoExtremaduranفارسیFangFantiPulaarsuomiFilipinoTornedalen FinnishFijianføroysktFonfrançaisCajun FrenchMiddle FrenchOld FrenchArpitanNorthern FrisianEastern FrisianFriulianFryskGaeilgeGaGagauzGan ChineseGayoGbayaZoroastrian DariGàidhligGeezGilbertesegalegoGilakiMiddle High GermanGuaraniOld High GermanGoan KonkaniGondiGorontaloGothicGreboAncient GreekSwiss GermanગુજરાતીWayuuFrafraGusiiGaelgGwichʼinHausaHaidaHakka ChineseHawaiianSouthern HaidaNorthern Haidaעבריתहिन्दीFiji HindiHiligaynonHittiteHmongHmong NjuaHiri MotuhrvatskiUpper SorbianXiang ChineseHaitian CreolemagyarHupaHalkomelemհայերենHererointerlinguaIbanIbibioIndonesiaInterlingueIgboꆈꌠꉙInupiaqEastern Canadian InuktitutWestern Canadian InuktitutIlokoIngushIdoíslenskaitalianoInuktitutIngrian日本語Jamaican Creole EnglishLojbanNgombaMachameJudeo-PersianJudeo-ArabicJutishJawaქართულიKara-KalpakKabyleKachinJjuKambaKawiKabardianKanembuTyapMakondeKabuverdianuKenyangKoroKongoKaingangKhasiKhotaneseKoyra ChiiniKhowarGikuyuKirmanjkiKuanyamaқазақ тіліKakokalaallisutKalenjinខ្មែរKimbunduಕನ್ನಡ한국어Komi-PermyakKonkaniKosraeanKpelleKanuriKarachay-BalkarKrioKinaray-aKarelianKurukhکٲشُرShambalaBafiaCologniankurdî (kurmancî)KumykKutenaiKomikernewekKwakʼwalaKuviкыргызчаLatinLadinoLangiWestern PanjabiLambaLëtzebuergeschLezghianLingua Franca NovaLugandaLimburgishLigurianLillooetLivonianLakotaLombardlingálaລາວMongoLouisiana CreoleLoziNorthern LuriSaamialietuviųLatgalianTshilubaLuba-LuluaLuisenoLundaLuoMizoLuyialatviešuLiterary ChineseLazMadureseMafaMagahiMaithiliMakasarMandingoMasaiMabaMokshaMandarMendeMeruMorisyenMalagasyMiddle IrishMakhuwa-MeettoMetaʼMarshalleseMāoriMi'kmawMinangkabauмакедонскиമലയാളംмонголManchuManipuriInnu-aimunMohawkMossiमराठीWestern MariMelayuMaltiMundangMuscogeeMirandeseMarwariMentawaiမြန်မာMyeneErzyaMazanderaniNauruMin Nan ChineseNeapolitanNamaNorwegian BokmålisiNdebeleLow GermanनेपालीNewariNdongaNiasNiueanAo NagaNederlandsKwasioNorwegian NynorskNgiemboonnorskNogaiOld NorseNovialN’KoSouth NdebeleNorthern SothoNuerNavajoClassical NewariNyanjaNyamweziNyankoleNyoroNzimaoccitanOjibwaNorthwestern OjibwaCentral OjibwaEastern OjibwaOji-CreeWestern OjibwaOkanaganOromooଓଡ଼ିଆиронOsageOttoman TurkishਪੰਜਾਬੀPangasinanPahlaviPampangaPapiamentoPalauanPicardNigerian PidginPennsylvania GermanPlautdietschOld PersianPalatine GermanPhoenicianPaliPijinpolskiPiedmontesePonticPohnpeianMaliseet-PassamaquoddyPrussianOld ProvençalپښتوportuguêsRunasimiKʼicheʼChimborazo Highland QuichuaRajasthaniRapanuiRarotonganRomagnolRohingyaRiffianrumantschIkirundiromânăRomboRomanyRotumanрусскийRusynRovianaAromanianKinyarwandaRwaसंस्कृत भाषाSandaweYakutSamaritan AramaicSamburuSasakSantaliSaurashtraNgambaySangusarduSicilianScotsسنڌيSassarese SardinianSouthern KurdishdavvisámegiellaSenecaSenaSeriSelkupKoyraboro SenniSängöOld IrishSamogitiansrpskohrvatskiTachelhitShanChadian ArabicසිංහලSidamoslovenčinaslovenščinaSouthern LushootseedLower SilesianSelayarSamoanSouthern SamiLule SamiInari SamiSkolt SamichiShonaSoninkeSoomaaliSogdienshqipсрпскиSranan TongoSererSwatiSahoSouthern SothoSaterland FrisianStraits SalishBasa SundaSukumaSusuSumeriansvenskaKiswahiliComorianClassical SyriacSyriacSilesianதமிழ்Southern TutchoneTuluతెలుగుTimneTesoTerenoTetumтоҷикӣTagishไทยTahltanትግርኛTigreTivtürkmen diliTokelauTsakhurTagalogKlingonTlingitTalyshTamashekTswanalea fakatongaNyasa TongaToki PonaTok PisinTürkçeTuroyoTarokoTorwaliTsongaTsakonianTsimshianтатарNorthern TutchoneMuslim TatTumbukaTuvaluTwiTasawaqTahitianTuvinianCentral Atlas TamazightUdmurtئۇيغۇرچەUgariticукраїнськаUmbunduاردوo‘zbekVaiVendaVenetianVepsTiếng ViệtWest FlemishMain-FranconianMakhuwaVolapükVoticVõroVunjoWalloonWalserWolayttaWarayWashoWarlpiriWolofWu ChineseKalmykIsiXhosaMingrelianKangriSogaYaoYapeseYangbenYembaייִדישÈdè YorùbáNheengatuCantoneseVahcuenghZapotecBlissymbolsZeelandicZenagaStandard Moroccan Tamazight中文isiZuluZuniZaza
• Add comment