Authentication and Identity Management

• Identity Theft

  • P. C. van Oorschot, S. Stubblebine. Countering Identity Theft through Digital Uniqueness, Location Cross-Checking, and Funneling. Financial Cryptography and Data Security (FC'05). Feb. 2005. Extended version (December 2005): Technical Report TR-05-12

• Passwords and Alternatives

  • Graphical Passwords

    • P.C. van Oorschot, J. Thorpe. On the Security of Graphical Password Schemes. Manuscript (December 2005): Technical Report TR-05-11. Integration and extension of USENIX Security 2004 and ACSAC 2004 papers.
    • J. Thorpe, P. C. van Oorschot. Towards Secure Design Choices for Implementing Graphical Passwords. Annual Computer Security Applications Conference (ACSAC'04). Dec. 2004
    • J. Thorpe, P. C. van Oorschot. Graphical Dictionaries and the Memorable Space of Graphical Passwords. USENIX Security Symposium. Aug. 2004

  • PassThoughts

    • J. Thorpe, P. C. van Oorschot, A. Somayaji. Pass-thoughts: Authenticating With Our Minds. New Security Paradigms Workshop, (NSPW'05). Sep. 2005

• Online Dictionary Attacks and Defenses

  • P. C. van Oorschot, S. Stubblebine. On Countering Online Dictionary Attacks with Login Histories and Humans-in-the-Loop. ACM Transactions on Information and System Security (TISSEC) (to appear). 2006
  • S. Stubblebine, P. C. van Oorschot. Addressing Online Dictionary Attacks with Login Histories and Humans-in-the-Loop. Financial Cryptography and Data Security (FC'04). Feb. 2004