{"id":"https://openalex.org/W4387227923","doi":"https://doi.org/10.1145/3570361.3613273","title":"Breaking Mobile Notification-based Authentication with Concurrent Attacks Outside of Mobile Devices","display_name":"Breaking Mobile Notification-based Authentication with Concurrent Attacks Outside of Mobile Devices","publication_year":2023,"publication_date":"2023-09-30","ids":{"openalex":"https://openalex.org/W4387227923","doi":"https://doi.org/10.1145/3570361.3613273"},"language":"en","primary_location":{"id":"doi:10.1145/3570361.3613273","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3570361.3613273","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3570361.3613273","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th Annual International Conference on Mobile Computing and Networking","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3570361.3613273","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065458594","display_name":"Ahmed Tanvir Mahdad","orcid":"https://orcid.org/0009-0002-4136-7004"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed Tanvir Mahdad","raw_affiliation_strings":["Texas A&M University, College Station, TX, USA"],"raw_orcid":"https://orcid.org/0009-0002-4136-7004","affiliations":[{"raw_affiliation_string":"Texas A&M University, College Station, TX, USA","institution_ids":["https://openalex.org/I91045830"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025768266","display_name":"Mohammed Jubur","orcid":"https://orcid.org/0000-0001-9398-3875"},"institutions":[{"id":"https://openalex.org/I91450128","display_name":"Jazan University","ror":"https://ror.org/02bjnq803","country_code":"SA","type":"education","lineage":["https://openalex.org/I91450128"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mohammed Jubur","raw_affiliation_strings":["Jazan University, Jazan, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-9398-3875","affiliations":[{"raw_affiliation_string":"Jazan University, Jazan, Saudi Arabia","institution_ids":["https://openalex.org/I91450128"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059730489","display_name":"Nitesh Saxena","orcid":"https://orcid.org/0000-0001-6083-104X"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nitesh Saxena","raw_affiliation_strings":["Texas A&M University, College Station, TX, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-6083-104X","affiliations":[{"raw_affiliation_string":"Texas A&M University, College Station, TX, United States of America","institution_ids":["https://openalex.org/I91045830"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7668163776397705},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7553683519363403},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.6464743614196777},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.6333115100860596},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5276564359664917},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5163992047309875},{"id":"https://openalex.org/keywords/chip-authentication-program","display_name":"Chip Authentication Program","score":0.4647122621536255},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.4515570104122162},{"id":"https://openalex.org/keywords/lightweight-extensible-authentication-protocol","display_name":"Lightweight Extensible Authentication Protocol","score":0.4372973144054413},{"id":"https://openalex.org/keywords/challenge-handshake-authentication-protocol","display_name":"Challenge-Handshake Authentication Protocol","score":0.4169842004776001},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34602445363998413},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3279898464679718},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1972760260105133}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7668163776397705},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7553683519363403},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.6464743614196777},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.6333115100860596},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5276564359664917},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5163992047309875},{"id":"https://openalex.org/C142124187","wikidata":"https://www.wikidata.org/wiki/Q5101471","display_name":"Chip Authentication Program","level":5,"score":0.4647122621536255},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.4515570104122162},{"id":"https://openalex.org/C167169670","wikidata":"https://www.wikidata.org/wiki/Q1824705","display_name":"Lightweight Extensible Authentication Protocol","level":4,"score":0.4372973144054413},{"id":"https://openalex.org/C207828512","wikidata":"https://www.wikidata.org/wiki/Q1060131","display_name":"Challenge-Handshake Authentication Protocol","level":4,"score":0.4169842004776001},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34602445363998413},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3279898464679718},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1972760260105133}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3570361.3613273","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3570361.3613273","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3570361.3613273","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th Annual International Conference on Mobile Computing and Networking","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3570361.3613273","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3570361.3613273","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3570361.3613273","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th Annual International Conference on Mobile Computing and Networking","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6100000143051147,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G4074060405","display_name":"SaTC: TTP: Small: SPHINX: A Password Store that Perfectly Hides Passwords from Itself","funder_award_id":"2152669","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G424997876","display_name":null,"funder_award_id":"OAC-2139358","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7846119105","display_name":null,"funder_award_id":"CNS-2201465","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8377161673","display_name":"CICI: UCSS: Towards Secure and Usable Push Notification Authentication for Collaborative Scientific Infrastructures","funder_award_id":"2139358","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8707955498","display_name":null,"funder_award_id":"CNS-2152669.","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387227923.pdf","grobid_xml":"https://content.openalex.org/works/W4387227923.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W2002093701","https://openalex.org/W2025744023","https://openalex.org/W2030112111","https://openalex.org/W2049130565","https://openalex.org/W2073342447","https://openalex.org/W2136954161","https://openalex.org/W2795673503","https://openalex.org/W3031085295","https://openalex.org/W3170696348","https://openalex.org/W3199298936","https://openalex.org/W3212503360","https://openalex.org/W6668907269"],"related_works":["https://openalex.org/W2093798919","https://openalex.org/W2393298610","https://openalex.org/W2390304521","https://openalex.org/W3022695109","https://openalex.org/W4253316174","https://openalex.org/W2941888532","https://openalex.org/W2147816236","https://openalex.org/W2907262898","https://openalex.org/W2133809311","https://openalex.org/W2050433615"],"abstract_inverted_index":{"Notification-based":[0],"authentication":[1,54,94,103,140,162],"is":[2,60,123],"an":[3,20,114,147],"emerging":[4],"Two-Factor":[5],"Authentication":[6],"(2FA)":[7],"and":[8,36,142],"passwordless":[9],"solution":[10],"that":[11],"leverages":[12],"interactive":[13],"notifications":[14],"on":[15,62],"mobile":[16,76],"devices":[17,77],"to":[18,33,48,90,98,117,125,127],"establish":[19],"additional":[21],"layer":[22],"of":[23,38,52,87,101,110,137],"security":[24],"beyond":[25],"passwords.":[26],"This":[27],"method":[28],"has":[29],"gained":[30],"popularity":[31],"due":[32],"its":[34],"convenience":[35],"ease":[37],"deployment":[39],"in":[40,160],"organizational":[41],"settings.":[42],"In":[43],"this":[44],"work,":[45],"we":[46,82,106],"aim":[47],"evaluate":[49],"the":[50,63,75,85,93,99,108,121,135,165],"effectiveness":[51],"notification-based":[53,139,161],"systems":[55],"when":[56],"a":[57,68,157],"malicious":[58,71,102],"entity":[59],"present":[61],"user's":[64],"computer,":[65],"such":[66,174],"as":[67,175],"keylogger":[69],"or":[70,78],"extension,":[72],"without":[73,170],"compromising":[74,171],"communication":[79],"channels.":[80],"Furthermore,":[81],"investigate":[83],"how":[84],"lack":[86],"information":[88],"provided":[89],"users":[91],"during":[92],"workflow":[95],"can":[96],"lead":[97],"approval":[100],"requests.":[104],"Notably,":[105],"highlight":[107],"vulnerability":[109,159],"cross-service":[111,150],"attacks,":[112],"where":[113,164],"attacker":[115,166],"authenticates":[116],"Service":[118,128],"B":[119],"while":[120],"user":[122,144,168],"attempting":[124],"authenticate":[126],"A.":[129],"Our":[130],"proof-of-concept":[131],"attack":[132,151],"program":[133],"demonstrates":[134],"susceptibility":[136],"various":[138],"systems,":[141,163],"our":[143],"study":[145],"reveals":[146],"alarming":[148],"82.2%":[149],"success":[152],"rate.":[153],"These":[154],"findings":[155],"suggest":[156],"potential":[158],"compromise":[167],"account":[169],"possession-factor":[172],"device,":[173],"smartphones.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}