TY - GEN
T1 - Forcing Johnny to login safely
T2 - 16th European Symposium on Research in Computer Security, ESORICS 2011
AU - Herzberg, Amir
AU - Margulies, Ronen
PY - 2011
Y1 - 2011
N2 - We present the results of the first long-term user study of site-based login mechanisms which force and train users to login safely. We found that interactive site-identifying images received 70% detection rates, which is significantly better than passive indicators' results [15,8,12]. We also found that login bookmarks, when used together with 'non-working' links, doubled the prevention rates of reaching spoofed login pages in the first place. Combining these mechanism provides effective prevention and detection of phishing attacks, and when several images are displayed in the login page, the best detection rates (82%) and overall resistance rates (93%) are achieved. We also introduce the notion of negative training functions, which train users not to take dangerous actions by experiencing failure when taking them.
AB - We present the results of the first long-term user study of site-based login mechanisms which force and train users to login safely. We found that interactive site-identifying images received 70% detection rates, which is significantly better than passive indicators' results [15,8,12]. We also found that login bookmarks, when used together with 'non-working' links, doubled the prevention rates of reaching spoofed login pages in the first place. Combining these mechanism provides effective prevention and detection of phishing attacks, and when several images are displayed in the login page, the best detection rates (82%) and overall resistance rates (93%) are achieved. We also introduce the notion of negative training functions, which train users not to take dangerous actions by experiencing failure when taking them.
UR - http://www.scopus.com/inward/record.url?scp=80053013660&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-23822-2_25
DO - 10.1007/978-3-642-23822-2_25
M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???
AN - SCOPUS:80053013660
SN - 9783642238215
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 452
EP - 471
BT - Computer Security, ESORICS 2011 - 16th European Symposium on Research in Computer Security, Proceedings
PB - Springer Verlag
Y2 - 12 September 2011 through 14 September 2011
ER -