CSCI E-170 Reading

Lecture 06: Identification, Authentication

required reading:

Other documents

• Security Myths and Passwords - Spafford - (2006)
• THE WAR AGAINST THE CAPS LOCK KEY IS ON - engadget - (2006)
• Déjà Vu: A User Study Using Images for Authentication - Dhamija & Perrig - (2000)
• REAL ID - Schneier - (2005)
• Jelly babies dupe fingerprint security - ZDNet Australia - (2002)
• MythBusters beat fingerprint security system (2006)
• The Failure of Two-Factor Authentication - Schneier - (2005)
• Purpose Built Keys - Bradner et all (2003)
• The Robustness of Google CAPTCHAs - Ahmad et al (2011)
• 11 Body Parts Defense Researchers Will Use to Track You - Shachtman & Beckhusen - 2013
• Guessable SSNs -- but is that the real problem? - Bradner - 2009

optional reading:

RFCs that may be of interest

• The S/KEY One-Time Password System - Haller - RFC 1760 - (1995)

Documents that may be of interest

• HumanAUT Secure Human Identification Protocols - Bender
• pages about prosopagnosia - Burman
• Picture Password: A Visual Login Technique for Mobile Devices - NIST - (2003)
• The Draw-a-Secret (DAS) Scheme - Jermyn (1999)
• RFID - Wikipedia
• National Science & Technology Council Subcommittee on Biometrics
• The History of Fingerprints - Moore - 2006
• John Daugman's web site
• 2001: Space Odyssey script
• Authentication in an Internet Banking Environment - Federal Financial Institutions Examination Council

Books that may be of interest

• Spychips, Albrecht & McIntyre, Nelson Current, (2005) - ISBN 1-5955-5020-8