The Experts below are selected from a list of 12 Experts worldwide ranked by ideXlab platform
Sennesh Eli - One of the best experts on this subject based on the ideXlab platform.
-
Cue-Pin-Select, a Secure Mental Password Manager
HAL CCSD, 2020Co-Authors: Blanchard Enka, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities, leading to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities. Recent research has offered multiple alternatives but those require either rote memorisation or computation on a physical device. This paper describes a secure and usable solution to this problem that requires no assistance from any physical device.We present the Cue-Pin-Select Password family scheme that requires little memorisation and allows users to create and retrieve Passwords easily. It uses our natural cognitive abilities to be durable, adaptable to different Password requirements, and resistant to attacks, including ones involving plain-text knowledge of some Passwords from the family. We include a theoretical analysis of its security according to multiple attack models. Finally, we show the promising results of a small-scale user study that put participants in real-life conditions for multiple days
-
Cue-Pin-Select, a Secure and Usable Offline Password Scheme
HAL CCSD, 2018Co-Authors: Blanchard Nicolas, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities. This leads to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities [10, 18]. Recent research [14, 6] has offered multiple alternatives but those require either rote mem-orization [8] or computation on a physical device [23, 7]. This paper presents the Cue-Pin-Select Password family scheme, which uses simple mental operations (counting and character Selection) to create a Password from a passphrase and the name of the service the Password is targeted for. It needs little memorization to create and retrieve Passwords, and requires no assistance from any physical device. It is durable and adaptable to different Password requirements. It is secure against known threat models, including against adversaries with stolen Passwords. A usability test shows the successes of users in real-life conditions over four days
Gabasova Leila - One of the best experts on this subject based on the ideXlab platform.
-
Cue-Pin-Select, a Secure Mental Password Manager
HAL CCSD, 2020Co-Authors: Blanchard Enka, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities, leading to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities. Recent research has offered multiple alternatives but those require either rote memorisation or computation on a physical device. This paper describes a secure and usable solution to this problem that requires no assistance from any physical device.We present the Cue-Pin-Select Password family scheme that requires little memorisation and allows users to create and retrieve Passwords easily. It uses our natural cognitive abilities to be durable, adaptable to different Password requirements, and resistant to attacks, including ones involving plain-text knowledge of some Passwords from the family. We include a theoretical analysis of its security according to multiple attack models. Finally, we show the promising results of a small-scale user study that put participants in real-life conditions for multiple days
-
Cue-Pin-Select, a Secure and Usable Offline Password Scheme
HAL CCSD, 2018Co-Authors: Blanchard Nicolas, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities. This leads to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities [10, 18]. Recent research [14, 6] has offered multiple alternatives but those require either rote mem-orization [8] or computation on a physical device [23, 7]. This paper presents the Cue-Pin-Select Password family scheme, which uses simple mental operations (counting and character Selection) to create a Password from a passphrase and the name of the service the Password is targeted for. It needs little memorization to create and retrieve Passwords, and requires no assistance from any physical device. It is durable and adaptable to different Password requirements. It is secure against known threat models, including against adversaries with stolen Passwords. A usability test shows the successes of users in real-life conditions over four days
Selker Ted - One of the best experts on this subject based on the ideXlab platform.
-
Cue-Pin-Select, a Secure Mental Password Manager
HAL CCSD, 2020Co-Authors: Blanchard Enka, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities, leading to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities. Recent research has offered multiple alternatives but those require either rote memorisation or computation on a physical device. This paper describes a secure and usable solution to this problem that requires no assistance from any physical device.We present the Cue-Pin-Select Password family scheme that requires little memorisation and allows users to create and retrieve Passwords easily. It uses our natural cognitive abilities to be durable, adaptable to different Password requirements, and resistant to attacks, including ones involving plain-text knowledge of some Passwords from the family. We include a theoretical analysis of its security according to multiple attack models. Finally, we show the promising results of a small-scale user study that put participants in real-life conditions for multiple days
-
Cue-Pin-Select, a Secure and Usable Offline Password Scheme
HAL CCSD, 2018Co-Authors: Blanchard Nicolas, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities. This leads to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities [10, 18]. Recent research [14, 6] has offered multiple alternatives but those require either rote mem-orization [8] or computation on a physical device [23, 7]. This paper presents the Cue-Pin-Select Password family scheme, which uses simple mental operations (counting and character Selection) to create a Password from a passphrase and the name of the service the Password is targeted for. It needs little memorization to create and retrieve Passwords, and requires no assistance from any physical device. It is durable and adaptable to different Password requirements. It is secure against known threat models, including against adversaries with stolen Passwords. A usability test shows the successes of users in real-life conditions over four days
Eli Sennesh - One of the best experts on this subject based on the ideXlab platform.
-
COMPSAC - Cue-Pin-Select, a Secure Mental Password Manager
2020 IEEE 44th Annual Computers Software and Applications Conference (COMPSAC), 2020Co-Authors: Enka Blanchard, Ted Selker, Levi Gabasova, Eli SenneshAbstract:People struggle to invent safe Passwords for many of their typical online activities, leading to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities [1], [2]. Recent research [3], [4] has offered multiple alternatives but those require either rote memorisation [5] or computation on a physical device[6], [7]. This paper describes a secure and usable solution to this problem that requires no assistance from any physical device. We present the Cue-Pin-Select Password family scheme that requires little memorisation and allows users to create and retrieve Passwords easily. It uses our natural cognitive abilities to be durable, adaptable to different Password requirements, and resistant to attacks, including ones involving plain-text knowledge of some Passwords from the family. We include a theoretical analysis of its security according to multiple attack models. Finally, we show the promising results of a small-scale user study that put participants in real-life conditions for multiple days.
Blanchard Enka - One of the best experts on this subject based on the ideXlab platform.
-
Cue-Pin-Select, a Secure Mental Password Manager
HAL CCSD, 2020Co-Authors: Blanchard Enka, Gabasova Leila, Selker Ted, Sennesh EliAbstract:People struggle to invent safe Passwords for many of their typical online activities, leading to a variety of security problems when they use overly simple Passwords or reuse them multiple times with minor modifications. Having different Passwords for each service generally requires Password managers or memorable (but weak) Passwords, introducing other vulnerabilities. Recent research has offered multiple alternatives but those require either rote memorisation or computation on a physical device. This paper describes a secure and usable solution to this problem that requires no assistance from any physical device.We present the Cue-Pin-Select Password family scheme that requires little memorisation and allows users to create and retrieve Passwords easily. It uses our natural cognitive abilities to be durable, adaptable to different Password requirements, and resistant to attacks, including ones involving plain-text knowledge of some Passwords from the family. We include a theoretical analysis of its security according to multiple attack models. Finally, we show the promising results of a small-scale user study that put participants in real-life conditions for multiple days