60 citations · 134 across the 6 of their papers we have counts for
6 papers
Privacy Considerations for Risk-Based Authentication Systems
Stephan Wiefling, Jan Tolsdorf, Luigi Lo Iacono
Risk-based authentication (RBA) extends authentication mechanisms to make them more robust against account takeover attacks, such as those using stolen passwords. RBA is recommende…
Evaluation of Account Recovery Strategies with FIDO2-based Passwordless Authentication
Johannes Kunke, Stephan Wiefling, Markus Ullmann +1
Threats to passwords are still very relevant due to attacks like phishing or credential stuffing. One way to solve this problem is to remove passwords completely. User studies on p…
What's in Score for Website Users: A Data-driven Long-term Study on Risk-based Authentication Characteristics
Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono
Risk-based authentication (RBA) aims to strengthen password-based authentication rather than replacing it. RBA does this by monitoring and recording additional features during the…
More Than Just Good Passwords? A Study on Usability and Security Perceptions of Risk-based Authentication
Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono
Risk-based Authentication (RBA) is an adaptive security measure to strengthen password-based authentication. RBA monitors additional features during login, and when observed featur…
Evaluation of Risk-based Re-Authentication Methods
Stephan Wiefling, Tanvi Patil, Markus Dürmuth +1
Risk-based Authentication (RBA) is an adaptive security measure that improves the security of password-based authentication by protecting against credential stuffing, password gues…
Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild
Stephan Wiefling, Luigi Lo Iacono, Markus Dürmuth
Risk-based authentication (RBA) is an adaptive security measure to strengthen password-based authentication. RBA monitors additional implicit features during password entry such as…