Social Engineering Resistant 2FA

2020/01/16 by Jakobsson, Markus
#Cryptography and Security (cs.CR) #D.4.6 #FOS: Computer and information sciences

paper · doi:10.48550/arxiv.2001.06075

Abstract

Attackers increasingly, and with high success rates, use social engineering techniques to circumvent second factor authentication (2FA) technologies, compromise user accounts and sidestep fraud detection technologies. We introduce a social engineering resistant approach that we term device-aware 2FA, to replace the use of traditional security codes.

Related

• Simple But Not Secure: An Empirical Security Analysis of Two-factor Authentication Systems
• True2F: Backdoor-resistant authentication tokens
• 2D-2FA: A New Dimension in Two-Factor Authentication
• A Forward-secure Efficient Two-factor Authentication Protocol
• Reducing Usefulness of Stolen Credentials in SSO Contexts