Evaluating User Perception of Multi-Factor Authentication: A Systematic Review

August 16, 2019 · Declared Dead · 🏛 International Symposium on Human Aspects of Information Security and Assurance

"No code URL or promise found in abstract"

Evidence collected by the PWNC Scanner

Authors Sanchari Das, Bingxing Wang, Zachary Tingle, L. Jean Camp arXiv ID 1908.05901 Category cs.CR: Cryptography & Security Cross-listed cs.CY, cs.HC Citations 65 Venue International Symposium on Human Aspects of Information Security and Assurance Last Checked 5 months ago

Abstract

Security vulnerabilities of traditional single factor authentication has become a major concern for security practitioners and researchers. To mitigate single point failures, new and technologically advanced Multi-Factor Authentication (MFA) tools have been developed as security solutions. However, the usability and adoption of such tools have raised concerns. An obvious solution can be viewed as conducting user studies to create more user-friendly MFA tools. To learn more, we performed a systematic literature review of recently published academic papers (N = 623) that primarily focused on MFA technologies. While majority of these papers (m = 300) proposed new MFA tools, only 9.1% of papers performed any user evaluation research. Our meta-analysis of user focused studies (n = 57) showed that researchers found lower adoption rate to be inevitable for MFAs, while avoidance was pervasive among mandatory use. Furthermore, we noted several reporting and methodological discrepancies in the user focused studies. We identified trends in participant recruitment that is indicative of demographic biases.