Johnny can obfuscate: beyond mother's maiden name

Authors:
William Cheswick
Affiliations:
Lumeta Corp.
Venue:
HOTSEC'06 Proceedings of the 1st USENIX Workshop on Hot Topics in Security
Year:
2006

Citing 0
Cited 4

One-Time Password Access to Any Server without Changing the Server

ISC '08 Proceedings of the 11th international conference on Information Security
Can "Something You Know" Be Saved?

ISC '08 Proceedings of the 11th international conference on Information Security
Digital objects as passwords

HOTSEC'08 Proceedings of the 3rd conference on Hot topics in security
Computing under occupation

NSPW '07 Proceedings of the 2007 Workshop on New Security Paradigms

Quantified Score

Hi-index	0.00

Visualization

Abstract

Challenge/response authentication is stronger than password authentication, but has traditionally required a device for computing the challenge. Though human computation is limited, people can compute simple responses to challenges. If the challenge and the corresponding response is obfuscated with decoy information, an authentication scheme might be strong enough for a number of applications. The signs used in major league baseball provide some interesting techniques for obfuscation.