Cybersecurity is an ever-evolving discipline that aims to protect every aspect of an
information system, including its users, from digital threats, adversaries and attacks. When it …

Risk-based authentication (RBA) aims to protect users against attacks involving stolen
passwords. RBA monitors features during login, and requests re-authentication when …

Online services increasingly rely on user-facing interfaces to communicate important
security-related account information—for example, which devices are logged into a user's …

Risk-based authentication (RBA) complements standard password-based logins by using
knowledge about previously observed user behavior to prevent malicious login attempts …

The advent of end-to-end encrypted (E2EE) messaging and backup services has brought
new challenges for usable authentication. Compared to regular web services, the nature of …

Risk-based authentication (RBA) aims to protect end-users against attacks involving stolen
or otherwise guessed passwords without requiring a second authentication method all the …

Online services have difficulties to replace passwords with more secure user authentication
mechanisms, such as Two-Factor Authentication (2FA). This is partly due to the fact that …

The proliferation of Internet services has led to an increasing need to protect private data.
User authentication serves as a crucial mechanism to ensure data security. Although robust …

HTTP client hints are a set of standardized HTTP request headers designed to modernize
and potentially replace the traditional user agent string. While the user agent string exposes …

Weaknesses in password-based authentication have always shaken password security,
especially with the rise of data breaches. Credential stuffing and password spraying attacks …