Multi-Account Dashboard for Authentication Dependency Analysis

Pöhn, Daniela; Gruschka, Nils; Ziegler, Leonhard

doi:10.1145/3538969.3538987

Cited by 3 publications

(10 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Account Access Graphs (Hammann et al, 2019;Pöhn et al, 2022) is a methodology to analyze authentication systems systematically. It allows the modeling of authentication and recovery methods of online services and the dependencies between different user accounts.…”

Section: Related Workmentioning

confidence: 99%

“…Further, it is possible to define dedicated scoring schemes to evaluate various aspects of an account, such as security and accessibility. It was shown that this could even become a practical tool for users to increase awareness about their account use and to support them in making it more secure (Pöhn et al, 2022). Moreover, AAGs were used in a lab study to observe patterns in account setups (Hammann et al, 2022).…”

Section: Related Workmentioning

confidence: 99%

“…Moreover, AAGs were used in a lab study to observe patterns in account setups (Hammann et al, 2022). The methodology used in this work mostly leans on the foundation provided in (Pöhn et al, 2022).…”

Section: Related Workmentioning

confidence: 99%

“…In an Account Access Graph as presented in (Pöhn et al, 2022), authentication methods and accounts are modeled as nodes in a graph. Account nodes are illustrated as rectangles, and authentication nodes as rounded rectangles.…”

Section: Account Access Graphsmentioning

confidence: 99%

“…To tackle this research question, we conducted an online survey with 185 test participants to study the authentication configuration of their Google and Apple accounts 2 . To analyze the participants' responses, we extended and applied Account Access Graphs (AAG) (Hammann et al, 2019;Pöhn et al, 2022), a new approach to evaluate MFA and recovery configurations. The analysis revealed insights into the account security and accessibility "in the wild".…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Evaluating the Influence of Multi-Factor Authentication and Recovery Settings on the Security and Accessibility of User Accounts

Büttner,

Gruschka

2024

Proceedings of the 10th International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

Nowadays, most online services offer different authentication methods that users can set up for multi-factor authentication but also as a recovery method. This configuration must be done thoroughly to prevent an adversary's access while ensuring the legitimate user does not lose access to their account. This is particularly important for fundamental everyday services, where either failure would have severe consequences. Nevertheless, little research has been done on the authentication of actual users regarding security and the risk of being locked out of their accounts. To foster research in this direction, this paper presents a study on the account settings of Google and Apple users. Considering the multi-factor authentication configuration and recovery options, we analyzed the account security and lock-out risks. Our results provide insights into the usage of multi-factor authentication in practice, show significant security differences between Google and Apple accounts, and reveal that many users would miss access to their accounts when losing a single authentication device.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%