{"id":"https://openalex.org/W7131081653","doi":"https://doi.org/10.1109/snams67467.2025.11390930","title":"Securing TOTP-Based Authentication in Online Social Systems via Entropy Augmentation","display_name":"Securing TOTP-Based Authentication in Online Social Systems via Entropy Augmentation","publication_year":2025,"publication_date":"2025-11-25","ids":{"openalex":"https://openalex.org/W7131081653","doi":"https://doi.org/10.1109/snams67467.2025.11390930"},"language":null,"primary_location":{"id":"doi:10.1109/snams67467.2025.11390930","is_oa":false,"landing_page_url":"https://doi.org/10.1109/snams67467.2025.11390930","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 12th International Conference on Social Networks Analysis, Management and Security (SNAMS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011745542","display_name":"Francesco Buccafurri","orcid":"https://orcid.org/0000-0003-0448-8464"},"institutions":[{"id":"https://openalex.org/I59725666","display_name":"University of Reggio Calabria","ror":"https://ror.org/041sz8d87","country_code":"IT","type":"education","lineage":["https://openalex.org/I59725666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Buccafurri","raw_affiliation_strings":["University Mediterranea of Reggio Calabria Reggio Calabria,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Mediterranea of Reggio Calabria Reggio Calabria,Italy","institution_ids":["https://openalex.org/I59725666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086191958","display_name":"Vincenzo De Angelis","orcid":"https://orcid.org/0000-0001-9731-3641"},"institutions":[{"id":"https://openalex.org/I45204951","display_name":"University of Calabria","ror":"https://ror.org/02rc97e94","country_code":"IT","type":"education","lineage":["https://openalex.org/I45204951"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Vincenzo De Angelis","raw_affiliation_strings":["University of Calabria Rende,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Calabria Rende,Italy","institution_ids":["https://openalex.org/I45204951"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018525310","display_name":"Sara Lazzaro","orcid":"https://orcid.org/0000-0002-0846-4980"},"institutions":[{"id":"https://openalex.org/I45204951","display_name":"University of Calabria","ror":"https://ror.org/02rc97e94","country_code":"IT","type":"education","lineage":["https://openalex.org/I45204951"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Sara Lazzaro","raw_affiliation_strings":["University of Calabria Rende,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Calabria Rende,Italy","institution_ids":["https://openalex.org/I45204951"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5122034917","display_name":"Carmen Licciardi","orcid":null},"institutions":[{"id":"https://openalex.org/I59725666","display_name":"University of Reggio Calabria","ror":"https://ror.org/041sz8d87","country_code":"IT","type":"education","lineage":["https://openalex.org/I59725666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Carmen Licciardi","raw_affiliation_strings":["University Mediterranea of Reggio Calabria Reggio Calabria,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Mediterranea of Reggio Calabria Reggio Calabria,Italy","institution_ids":["https://openalex.org/I59725666"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.70130075,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"468","last_page":"473"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.1298999935388565,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.1298999935388565,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.11640000343322754,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.07750000059604645,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.6563000082969666},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5929999947547913},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.48919999599456787},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4700999855995178},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.3815000057220459},{"id":"https://openalex.org/keywords/replay-attack","display_name":"Replay attack","score":0.37310001254081726},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.36820000410079956},{"id":"https://openalex.org/keywords/challenge\u2013response-authentication","display_name":"Challenge\u2013response authentication","score":0.35089999437332153}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7602999806404114},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7429999709129333},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.6563000082969666},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5929999947547913},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.48919999599456787},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4700999855995178},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.3815000057220459},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.37310001254081726},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.36820000410079956},{"id":"https://openalex.org/C131129157","wikidata":"https://www.wikidata.org/wiki/Q1059963","display_name":"Challenge\u2013response authentication","level":4,"score":0.35089999437332153},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.33160001039505005},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.3257000148296356},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.3167000114917755},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3158999979496002},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.2669999897480011},{"id":"https://openalex.org/C2778717966","wikidata":"https://www.wikidata.org/wiki/Q4189076","display_name":"Protection mechanism","level":3,"score":0.2581000030040741},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.25519999861717224},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2522999942302704},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.25099998712539673}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/snams67467.2025.11390930","is_oa":false,"landing_page_url":"https://doi.org/10.1109/snams67467.2025.11390930","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 12th International Conference on Social Networks Analysis, Management and Security (SNAMS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.706177294254303}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2113446256","https://openalex.org/W2290421205","https://openalex.org/W2335888457","https://openalex.org/W3022818210","https://openalex.org/W4212851301","https://openalex.org/W4385489866","https://openalex.org/W4390480990","https://openalex.org/W4402630076"],"related_works":[],"abstract_inverted_index":{"In":[0,122],"online":[1,63],"social":[2],"systems,":[3],"authentication":[4,34,42,50,67],"plays":[5],"a":[6,44,73,86,92,143,154],"crucial":[7],"role":[8],"in":[9],"ensuring":[10],"the":[11,30,33,53,56,60,78,81,96,149],"trustworthiness":[12],"and":[13,19,24,38,51,80,95,116,145],"integrity":[14],"of":[15,32,55,62],"interactions":[16],"between":[17],"users":[18],"services.":[20],"Social":[21],"engineering":[22],"attacks":[23],"malware":[25],"pose":[26],"significant":[27],"threats":[28],"to":[29,48,83,104,134],"security":[31,61],"process,":[35],"enabling":[36],"impersonation":[37],"identity":[39],"theft.":[40],"Two-factor":[41],"is":[43,102],"widely":[45],"used":[46],"mechanism":[47,75],"strengthen":[49],"reduce":[52],"impact":[54],"human":[57],"factor":[58],"on":[59,91],"interactions.":[64],"Often,":[65],"two-factor":[66],"leverages":[68],"Time-based":[69],"One-Time":[70],"Passwords":[71],"(TOTP),":[72],"standardized":[74],"that":[76,130],"allows":[77],"client":[79],"server":[82],"autonomously":[84],"compute":[85],"one-time":[87],"password":[88],"(OTP)":[89],"based":[90],"shared":[93],"secret":[94],"current":[97,150],"time":[98],"slot.":[99],"Unfortunately,":[100],"TOTP":[101,129,151],"vulnerable":[103],"forward":[105,137],"replay":[106,138],"attacks,":[107],"whereby":[108],"an":[109,127],"attacker":[110],"can":[111],"pre-compute":[112],"future":[113],"valid":[114],"OTPs":[115],"use":[117],"them":[118],"for":[119],"malicious":[120],"purposes.":[121],"this":[123],"paper,":[124],"we":[125],"propose":[126],"enhanced":[128],"includes":[131],"external":[132],"entropy":[133],"fully":[135],"prevent":[136],"attacks.":[139],"The":[140],"solution":[141],"offers":[142],"practical":[144],"deployable":[146],"improvement":[147],"over":[148],"standard,":[152],"addressing":[153],"known":[155],"vulnerability":[156],"with":[157],"minimal":[158],"implementation":[159],"overhead.":[160]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-24T00:00:00"}