{"id":"https://openalex.org/W2926316232","doi":"https://doi.org/10.1145/3308992","title":"Using Episodic Memory for User Authentication","display_name":"Using Episodic Memory for User Authentication","publication_year":2019,"publication_date":"2019-04-02","ids":{"openalex":"https://openalex.org/W2926316232","doi":"https://doi.org/10.1145/3308992","mag":"2926316232"},"language":"en","primary_location":{"id":"doi:10.1145/3308992","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3308992","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033106393","display_name":"Simon S. Woo","orcid":"https://orcid.org/0000-0002-8983-1542"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Simon S. Woo","raw_affiliation_strings":["Sungkyunkwan University, Suwon, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-8983-1542","affiliations":[{"raw_affiliation_string":"Sungkyunkwan University, Suwon, South Korea","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051313364","display_name":"Ron Artstein","orcid":"https://orcid.org/0009-0005-5187-6381"},"institutions":[{"id":"https://openalex.org/I4210087747","display_name":"Creative Technologies (United States)","ror":"https://ror.org/001qkb777","country_code":"US","type":"company","lineage":["https://openalex.org/I4210087747"]},{"id":"https://openalex.org/I4388482679","display_name":"USC Institute for Creative Technologies","ror":"https://ror.org/03hjhvn29","country_code":null,"type":"facility","lineage":["https://openalex.org/I1174212","https://openalex.org/I4388482679"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ron Artstein","raw_affiliation_strings":["USC/Institute for Creative Technologies, Playa Vista, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"USC/Institute for Creative Technologies, Playa Vista, CA","institution_ids":["https://openalex.org/I4210087747","https://openalex.org/I4388482679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039738315","display_name":"Elsi Kaiser","orcid":"https://orcid.org/0000-0003-3594-4127"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Elsi Kaiser","raw_affiliation_strings":["USC/Linguistics, Los Angeles, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"USC/Linguistics, Los Angeles, CA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041124847","display_name":"Le Xiao","orcid":"https://orcid.org/0000-0001-7277-9170"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao Le","raw_affiliation_strings":["USC/Information Sciences Institute, Marina del Rey, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"USC/Information Sciences Institute, Marina del Rey, CA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103177278","display_name":"Jelena Mirkovi\u0107","orcid":"https://orcid.org/0000-0001-7462-8747"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jelena Mirkovic","raw_affiliation_strings":["USC/Information Sciences Institute, Marina del Rey, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"USC/Information Sciences Institute, Marina del Rey, CA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0333,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.8232095,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"22","issue":"2","first_page":"1","last_page":"34"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9580000042915344,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9072898626327515},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6060290336608887},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5792086720466614},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5787948369979858},{"id":"https://openalex.org/keywords/recall","display_name":"Recall","score":0.48969224095344543},{"id":"https://openalex.org/keywords/casual","display_name":"Casual","score":0.4738735854625702},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.4110877811908722},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3735133409500122},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3336043357849121},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3209376931190491},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.24387028813362122},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.21902120113372803},{"id":"https://openalex.org/keywords/cognitive-psychology","display_name":"Cognitive psychology","score":0.06454703211784363}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9072898626327515},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6060290336608887},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5792086720466614},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5787948369979858},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.48969224095344543},{"id":"https://openalex.org/C2781426162","wikidata":"https://www.wikidata.org/wiki/Q2275793","display_name":"Casual","level":2,"score":0.4738735854625702},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.4110877811908722},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3735133409500122},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3336043357849121},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3209376931190491},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.24387028813362122},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.21902120113372803},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.06454703211784363},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3308992","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3308992","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4300000071525574,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W167157979","https://openalex.org/W173470260","https://openalex.org/W218702423","https://openalex.org/W1146155598","https://openalex.org/W1485033854","https://openalex.org/W1503108337","https://openalex.org/W1531374185","https://openalex.org/W1612881843","https://openalex.org/W1765630465","https://openalex.org/W1931604409","https://openalex.org/W2016938612","https://openalex.org/W2019578814","https://openalex.org/W2023306951","https://openalex.org/W2030007850","https://openalex.org/W2030112111","https://openalex.org/W2048755632","https://openalex.org/W2053091009","https://openalex.org/W2054626033","https://openalex.org/W2061397531","https://openalex.org/W2076245464","https://openalex.org/W2080858550","https://openalex.org/W2082164775","https://openalex.org/W2107911557","https://openalex.org/W2113936660","https://openalex.org/W2114605895","https://openalex.org/W2121386924","https://openalex.org/W2123442489","https://openalex.org/W2127171880","https://openalex.org/W2131204116","https://openalex.org/W2135316003","https://openalex.org/W2146270836","https://openalex.org/W2152729587","https://openalex.org/W2156128534","https://openalex.org/W2157151879","https://openalex.org/W2167404615","https://openalex.org/W2218132318","https://openalex.org/W2250861254","https://openalex.org/W2253893204","https://openalex.org/W2413416220","https://openalex.org/W2551618183","https://openalex.org/W2566586262","https://openalex.org/W2610414453","https://openalex.org/W2795675112","https://openalex.org/W4230399697","https://openalex.org/W4234694504","https://openalex.org/W4253521835","https://openalex.org/W4365799834"],"related_works":["https://openalex.org/W1987516957","https://openalex.org/W2183044514","https://openalex.org/W2596869006","https://openalex.org/W2346878720","https://openalex.org/W2969720675","https://openalex.org/W1639969416","https://openalex.org/W4238969722","https://openalex.org/W2048203748","https://openalex.org/W2009226705","https://openalex.org/W72859687"],"abstract_inverted_index":{"Passwords":[0],"are":[1,9,27,34,51,163,178,196,219],"widely":[2],"used":[3,29],"for":[4,12,30,212,278],"user":[5,14,118],"authentication,":[6,113,213],"but":[7,49],"they":[8,50],"often":[10,200],"difficult":[11],"a":[13,44,57,79,84,86,88],"to":[15,46,180,222,268],"recall,":[16],"easily":[17,53],"cracked":[18],"by":[19,241,246],"automated":[20],"programs,":[21],"and":[22,69,90,105,110,121,134,144,154,187,193,206,244],"heavily":[23],"reused.":[24],"Security":[25],"questions":[26,109,120,143,208,217],"also":[28],"secondary":[31],"authentication.":[32],"They":[33],"more":[35,139,183],"memorable":[36,184],"than":[37,141,170,185,270],"passwords,":[38,145],"because":[39],"the":[40,47,96,102,114,117,123,126,147,254,260],"question":[41,132,256],"serves":[42],"as":[43,83,199,201,285],"hint":[45],"user,":[48],"very":[52],"guessed.":[54],"We":[55,129],"propose":[56],"new":[58],"authentication":[59,280,293],"mechanism,":[60],"called":[61],"\u201clife-experience":[62],"passwords":[63,68,186],"(LEPs).\u201d":[64],"Sitting":[65],"somewhere":[66],"between":[67],"security":[70,142,191,207,228,255],"questions,":[71],"an":[72,171],"LEP":[73,94,227],"consists":[74],"of":[75,237,253],"several":[76,216],"facts":[77,100],"about":[78],"user-chosen":[80],"life":[81],"event\u2014such":[82],"trip,":[85],"graduation,":[87],"wedding,":[89],"so":[91],"on.":[92],"At":[93,112],"creation,":[95],"system":[97,115],"extracts":[98],"these":[99,273],"from":[101],"user\u2019s":[103],"input":[104,269],"transforms":[106],"them":[107],"into":[108],"answers.":[111],"prompts":[116],"with":[119,125,190],"matches":[122],"answers":[124],"stored":[127],"ones.":[128],"show":[130],"that":[131,218],"choice":[133],"design":[135],"make":[136,275],"LEPs":[137,162,177,195,205,214,238,262,276],"much":[138],"secure":[140],"while":[146],"question-answer":[148],"format":[149],"promotes":[150],"low":[151],"password":[152],"reuse":[153],"high":[155],"recall.":[156],"Specifically,":[157],"we":[158],"find":[159],"that:":[160],"(1)":[161],"10":[164],"9":[165],"--10":[166],"14":[167],"\u00d7":[168,182,266],"stronger":[169,292],"ideal,":[172],"randomized,":[173],"eight-character":[174],"password;":[175],"(2)":[176],"up":[179],"3":[181],"on":[188],"par":[189],"questions;":[192],"(3)":[194],"reused":[197],"half":[198,252],"passwords.":[202,271],"While":[203],"both":[204],"use":[209,215],"personal":[210],"experiences":[211],"closely":[220],"tailored":[221],"each":[223],"user.":[224],"This":[225],"increases":[226],"against":[229],"guessing":[230,257],"attacks.":[231],"In":[232],"our":[233],"evaluation,":[234],"only":[235],"0.7%":[236],"were":[239],"guessed":[240],"casual":[242],"friends,":[243],"9.5%":[245],"family":[247],"members":[248],"or":[249,287],"close":[250],"friends\u2014roughly":[251],"rate.":[258],"On":[259],"downside,":[261],"take":[263],"around":[264],"5":[265],"longer":[267],"So,":[272],"qualities":[274],"suitable":[277],"multi-factor":[279],"at":[281],"high-value":[282],"servers,":[283,290],"such":[284],"financial":[286],"sensitive":[288],"work":[289],"where":[291],"strength":[294],"is":[295],"needed.":[296]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}