Multi-Account Dashboard for Authentication Dependency Analysis
Daniela Pöhn, Nils Gruschka, Leonhard Ziegler · Proceedings of the 17th International Conference on Availability, Reliability and Security · 2022
User authentication is necessary for the majority of online services. If users fail to authenticate due to the loss of an authentication factor, fallback processes allow users to regain access to their accounts. However, most of the proposed and deployed fallback methods have substantial weaknesses that degrade security, e.g., guessable security questions. This is even more serious since through account dependencies (e.g., password reset via email), additional accounts can be compromised. On the other hand, misconfiguration of (fallback) authentication might result in locking a user out of an account.