457 citations
- Max Planck Institute for Radio AstronomyDE14 papers
- University of SiegenDE9 papers
- University of CologneDE8 papers
- Centre National de la Recherche ScientifiqueFR6 papers
- Deutsches Zentrum für Luft- und Raumfahrt e. V. (DLR)DE5 papers
- Ruhr University BochumDE5 papers
- Université de LorraineFR5 papers
- University of BonnDE5 papers
- University of BremenDE5 papers
- Fraunhofer Institute for Algorithms and Scientific ComputingDE4 papers
- Fraunhofer Institute for Applied Information TechnologyDE4 papers
- Fraunhofer Institute for Intelligent Analysis and Information SystemsDE4 papers
7 papers · 1 filter
A Privacy Measure Turned Upside Down? Investigating the Use of HTTP Client Hints on the Web
Stephan Wiefling, Marian Hönscheid, Luigi Lo Iacono
HTTP client hints are a set of standardized HTTP request headers designed to modernize and potentially replace the traditional user agent string. While the user agent string expose…
Is It Really You Who Forgot the Password? When Account Recovery Meets Risk-Based Authentication
Andre Büttner, Andreas Thue Pedersen, Stephan Wiefling +2
Risk-based authentication (RBA) is used in online services to protect user accounts from unauthorized takeover. RBA commonly uses contextual features that indicate a suspicious log…
Privacy Considerations for Risk-Based Authentication Systems
Stephan Wiefling, Jan Tolsdorf, Luigi Lo Iacono
Risk-based authentication (RBA) extends authentication mechanisms to make them more robust against account takeover attacks, such as those using stolen passwords. RBA is recommende…
Pump Up Password Security! Evaluating and Enhancing Risk-Based Authentication on a Real-World Large-Scale Online Service
Stephan Wiefling, Paul René Jørgensen, Sigurd Thunem +1
Risk-based authentication (RBA) aims to protect users against attacks involving stolen passwords. RBA monitors features during login, and requests re-authentication when feature va…
What's in Score for Website Users: A Data-driven Long-term Study on Risk-based Authentication Characteristics
Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono
Risk-based authentication (RBA) aims to strengthen password-based authentication rather than replacing it. RBA does this by monitoring and recording additional features during the…
Evaluation of Risk-based Re-Authentication Methods
Stephan Wiefling, Tanvi Patil, Markus Dürmuth +1
Risk-based Authentication (RBA) is an adaptive security measure that improves the security of password-based authentication by protecting against credential stuffing, password gues…