|
Tips for Avoiding Bad Authentication Challenge Questions
Date: July 2007 Publication: Source 1: http://www.passwordresearch.com/files/TipsforAvoidingBadQuestions.pdf Source 2: http://securityps.infosecmedia.com/whitepapers/TipsforAvoidingBadQuestions.pdf Abstract or Summary:
Within this white paper, we discuss the characteristics of good and bad challenge questions, evaluating them against the core characteristics of all authenticators. In addition, we evaluate a sample of commonly used challenge questions and provide you with our feedback on their strengths and weaknesses against attack. Do you have additional information to contribute regarding this research paper? If so, please email siteupdates@passwordresearch.com with the details.
<-- Back to Authentication Research Paper Index |