Tips for Avoiding Bad Authentication Challenge Questions
Date: July 2007
Source 1: http://www.passwordresearch.com/files/TipsforAvoidingBadQuestions.pdf
Source 2: http://securityps.infosecmedia.com/whitepapers/TipsforAvoidingBadQuestions.pdf
Abstract or Summary:
Within this white paper, we discuss the characteristics of good and bad challenge questions, evaluating them against the core characteristics of all authenticators. In addition, we evaluate a sample of commonly used challenge questions and provide you with our feedback on their strengths and weaknesses against attack.
Do you have additional information to contribute regarding this research paper? If so, please email firstname.lastname@example.org with the details.