60 citations · 186 across the 9 of their papers we have counts for
10 papers
Is It Really You Who Forgot the Password? When Account Recovery Meets Risk-Based Authentication
Andre Büttner, Andreas Thue Pedersen, Stephan Wiefling +2
Risk-based authentication (RBA) is used in online services to protect user accounts from unauthorized takeover. RBA commonly uses contextual features that indicate a suspicious log…
Privacy Considerations for Risk-Based Authentication Systems
Stephan Wiefling, Jan Tolsdorf, Luigi Lo Iacono
Risk-based authentication (RBA) extends authentication mechanisms to make them more robust against account takeover attacks, such as those using stolen passwords. RBA is recommende…
Pump Up Password Security! Evaluating and Enhancing Risk-Based Authentication on a Real-World Large-Scale Online Service
Stephan Wiefling, Paul René Jørgensen, Sigurd Thunem +1
Risk-based authentication (RBA) aims to protect users against attacks involving stolen passwords. RBA monitors features during login, and requests re-authentication when feature va…
XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany
Paul Höller, Alexander Krumeich, Luigi Lo Iacono
XML Signature Wrapping (XSW) has been a relevant threat to web services for 15 years until today. Using the Personal Health Record (PHR), which is currently under development in Ge…
Evaluation of Account Recovery Strategies with FIDO2-based Passwordless Authentication
Johannes Kunke, Stephan Wiefling, Markus Ullmann +1
Threats to passwords are still very relevant due to attacks like phishing or credential stuffing. One way to solve this problem is to remove passwords completely. User studies on p…
What's in Score for Website Users: A Data-driven Long-term Study on Risk-based Authentication Characteristics
Stephan Wiefling, Markus Dürmuth, Luigi Lo Iacono
Risk-based authentication (RBA) aims to strengthen password-based authentication rather than replacing it. RBA does this by monitoring and recording additional features during the…