{"id":"https://openalex.org/W2006809639","doi":"https://doi.org/10.1145/2751323.2751327","title":"Two-factor authentication: is the world ready?","display_name":"Two-factor authentication: is the world ready?","publication_year":2015,"publication_date":"2015-04-13","ids":{"openalex":"https://openalex.org/W2006809639","doi":"https://doi.org/10.1145/2751323.2751327","mag":"2006809639"},"language":"en","primary_location":{"id":"doi:10.1145/2751323.2751327","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2751323.2751327","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighth European Workshop on System Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035575887","display_name":"Thanasis Petsas","orcid":null},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Thanasis Petsas","raw_affiliation_strings":["Foundation for Research and Technology---Hellas (FORTH), Greece","[Foundation for Research and Technology Hellas (FORTH), Greece]"],"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology---Hellas (FORTH), Greece","institution_ids":["https://openalex.org/I8901234"]},{"raw_affiliation_string":"[Foundation for Research and Technology Hellas (FORTH), Greece]","institution_ids":["https://openalex.org/I8901234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087486247","display_name":"Giorgos Tsirantonakis","orcid":"https://orcid.org/0000-0001-8193-7791"},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Giorgos Tsirantonakis","raw_affiliation_strings":["Foundation for Research and Technology---Hellas (FORTH), Greece","[Foundation for Research and Technology Hellas (FORTH), Greece]"],"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology---Hellas (FORTH), Greece","institution_ids":["https://openalex.org/I8901234"]},{"raw_affiliation_string":"[Foundation for Research and Technology Hellas (FORTH), Greece]","institution_ids":["https://openalex.org/I8901234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102849919","display_name":"\u0397\u03bb\u03af\u03b1\u03c2 \u0391\u03b8\u03b1\u03bd\u03b1\u03c3\u03cc\u03c0\u03bf\u03c5\u03bb\u03bf\u03c2","orcid":"https://orcid.org/0000-0002-8759-3261"},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Elias Athanasopoulos","raw_affiliation_strings":["Foundation for Research and Technology---Hellas (FORTH), Greece","[Foundation for Research and Technology Hellas (FORTH), Greece]"],"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology---Hellas (FORTH), Greece","institution_ids":["https://openalex.org/I8901234"]},{"raw_affiliation_string":"[Foundation for Research and Technology Hellas (FORTH), Greece]","institution_ids":["https://openalex.org/I8901234"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022073151","display_name":"Sotiris Ioannidis","orcid":"https://orcid.org/0000-0001-9340-2241"},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Sotiris Ioannidis","raw_affiliation_strings":["Foundation for Research and Technology---Hellas (FORTH), Greece","[Foundation for Research and Technology Hellas (FORTH), Greece]"],"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology---Hellas (FORTH), Greece","institution_ids":["https://openalex.org/I8901234"]},{"raw_affiliation_string":"[Foundation for Research and Technology Hellas (FORTH), Greece]","institution_ids":["https://openalex.org/I8901234"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5035575887"],"corresponding_institution_ids":["https://openalex.org/I8901234"],"apc_list":null,"apc_paid":null,"fwci":17.4812,"has_fulltext":false,"cited_by_count":87,"citation_normalized_percentile":{"value":0.98969152,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8210558891296387},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7975791692733765},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6906790733337402},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6704100370407104},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5275608897209167},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.4750214219093323},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4211421310901642},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.4135655164718628},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.148578941822052}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8210558891296387},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7975791692733765},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6906790733337402},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6704100370407104},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5275608897209167},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.4750214219093323},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4211421310901642},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.4135655164718628},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.148578941822052},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2751323.2751327","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2751323.2751327","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighth European Workshop on System Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.41999998688697815}],"awards":[{"id":"https://openalex.org/G7040128678","display_name":null,"funder_award_id":"HOME/2011/ISEC/AG/INT/4000002166","funder_id":"https://openalex.org/F4320334963","funder_display_name":"Fifth Framework Programme"},{"id":"https://openalex.org/G8164522309","display_name":null,"funder_award_id":"608533, 317631","funder_id":"https://openalex.org/F4320334960","funder_display_name":"Seventh Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320334960","display_name":"Seventh Framework Programme","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320334963","display_name":"Fifth Framework Programme","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W128619364","https://openalex.org/W1603565383","https://openalex.org/W1607915502","https://openalex.org/W1655958391","https://openalex.org/W1896997982","https://openalex.org/W1987516957","https://openalex.org/W2008648042","https://openalex.org/W2009829087","https://openalex.org/W2019380907","https://openalex.org/W2030993695","https://openalex.org/W2059942829","https://openalex.org/W2104773223","https://openalex.org/W2108384401","https://openalex.org/W2116705992","https://openalex.org/W2129768690","https://openalex.org/W2131906261","https://openalex.org/W2141554582","https://openalex.org/W2142449826","https://openalex.org/W2142765329","https://openalex.org/W2171920515","https://openalex.org/W2339509466","https://openalex.org/W2350778671","https://openalex.org/W2522120027","https://openalex.org/W4299301436"],"related_works":["https://openalex.org/W2021087413","https://openalex.org/W2359085393","https://openalex.org/W2377774403","https://openalex.org/W2237863779","https://openalex.org/W2156083280","https://openalex.org/W2387329106","https://openalex.org/W2969720675","https://openalex.org/W2949495265","https://openalex.org/W2557836603","https://openalex.org/W2090295280"],"abstract_inverted_index":{"As":[0],"text-based":[1],"passwords":[2],"continue":[3],"to":[4,15,119,132,192],"be":[5,54,198],"the":[6,30,39,42,51,58,73,79,90,111,135,176],"dominant":[7],"form":[8],"for":[9,26,41,71,97,103,201,213],"user":[10],"identification":[11],"today,":[12],"services":[13],"try":[14],"protect":[16],"their":[17],"costumers":[18],"by":[19,57,171],"offering":[20],"enhanced,":[21],"and":[22,137,154],"more":[23,172],"secure,":[24],"technologies":[25],"authentication.":[27],"One":[28],"of":[29,60,75,127,175,185],"most":[31],"promising":[32],"is":[33,47,101],"two-factor":[34],"authentication":[35],"(2FA).":[36],"2FA":[37,76,100,165],"raises":[38],"bar":[40],"attacker":[43],"significantly,":[44],"however,":[45],"it":[46,122],"still":[48],"questionable":[49],"if":[50,99],"technology":[52],"can":[53,197],"realistically":[55],"adopted":[56,170],"majority":[59],"Internet":[61],"users.":[62,177],"In":[63,130],"this":[64,206],"paper,":[65],"we":[66,88,147,162,188,208],"attempt":[67],"a":[68,94,104,183],"first":[69],"study":[70],"quantifying":[72],"adoption":[74],"in":[77,93,205,219],"probably":[78],"largest":[80],"existing":[81],"provider,":[82],"namely":[83],"Google.":[84],"For":[85],"achieving":[86],"this,":[87],"leverage":[89,148],"password-reminder":[91],"process":[92],"novel":[95],"way":[96],"discovering":[98],"enabled":[102],"particular":[105],"account,":[106],"without":[107],"annoying":[108],"or":[109,142],"affecting":[110],"account's":[112],"owner.":[113],"Our":[114],"technique":[115],"has":[116,166],"many":[117],"challenges":[118],"overcome,":[120],"since":[121],"requires":[123],"issuing":[124],"massively":[125],"thousands":[126],"password":[128,221],"reminders.":[129,222],"order":[131],"remain":[133],"below":[134],"radar,":[136],"therefore":[138],"avoid":[139],"solving":[140],"CAPTCHAs":[141],"having":[143],"our":[144,186],"hosts":[145],"blocked,":[146],"distributed":[149],"systems,":[150],"such":[151],"as":[152,182],"TOR":[153],"PlanetLab.":[155],"After":[156],"examining":[157],"over":[158],"100,000":[159],"Google":[160],"accounts,":[161],"conclude":[163],"that":[164],"not":[167,180],"yet":[168],"been":[169],"than":[173],"6.4%":[174],"Last":[178],"but":[179],"least,":[181],"side-effect":[184],"technique,":[187],"are":[189],"also":[190],"able":[191],"exfiltrate":[193],"private":[194],"information,":[195],"which":[196],"potentially":[199],"used":[200],"malicious":[202],"purposes.":[203],"Thus,":[204],"paper":[207],"additionally":[209],"present":[210],"important":[211],"findings":[212],"raising":[214],"concerns":[215],"about":[216],"privacy":[217],"risks":[218],"designing":[220]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}