A novel Two-Factor HoneyToken Authentication Mechanism

Papaspirou, Vassilis; Maglaras, Leandros; Ferrag, Mohamed Amine; Kantzavelou, Ioanna; Janicke, Helge; Douligeris, Christos

Abstract

The majority of systems rely on user authentication on passwords, but passwords have so many weaknesses and widespread use that easily raise significant security concerns, regardless of their encrypted form. Users hold the same password for different accounts, administrators never check password files for flaws that might lead to a successful cracking, and the lack of a tight security policy regarding regular password replacement are a few problems that need to be addressed. The proposed research work aims at enhancing this security mechanism, prevent penetrations, password theft, and attempted break-ins towards securing computing systems. The selected solution approach is two-folded; it implements a two-factor authentication scheme to prevent unauthorized access, accompanied by Honeyword principles to detect corrupted or stolen tokens. Both can be integrated into any platform or web application with the use of QR codes and a mobile phone.

Citation

Papaspirou, V., Maglaras, L., Ferrag, M. A., Kantzavelou, I., Janicke, H., & Douligeris, C. (2021). A novel Two-Factor HoneyToken Authentication Mechanism. In 2021 International Conference on Computer Communications and Networks (ICCCN). https://doi.org/10.1109/icccn52240.2021.9522319

• Conference Name: 2021 International Conference on Computer Communications and Networks (ICCCN)
• Conference Location: Athens, Greece
• Start Date: Jul 19, 2021
• End Date: Jul 22, 2021
• Acceptance Date: Jun 8, 2021
• Online Publication Date: Aug 31, 2021
• Publication Date: 2021
• Deposit Date: Nov 30, 2022
• Publisher: Institute of Electrical and Electronics Engineers
• Series ISSN: 2637-9430
• Book Title: 2021 International Conference on Computer Communications and Networks (ICCCN)
• ISBN: 978-1-6654-4835-2
• DOI: https://doi.org/10.1109/icccn52240.2021.9522319
• Keywords: Honeywords; Two Factor Authentication; Security
• Public URL: http://researchrepository.napier.ac.uk/Output/2963551