Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Risk-based authentication
open-in-new
><h2 id="criticism">Criticism</h2> <ul><li>The system that computes the risk profile has to be diligently maintained and updated as new threats emerge. Improper <a href="/facts/Computer_configuration/fIbgNCxK">configuration</a> may lead to unauthorized access.<a class="footnote-ref" id="fnref:9" href="#fn:9"><sup>9</sup></a></li> <li>The user's connection profile (e.g. <a href="/facts/Geolocation_software/CAS3a4tv">IP Geolocation</a>, connection type, <a href="/facts/Keystroke_dynamics/QxE5x4AS">keystroke dynamics</a>, user behaviour) has to be detected and used to compute the risk profile. Lack of proper detection may lead to unauthorized access.</li></ul> <h2 id="see-also">See also</h2> <ul><li><a href="/facts/Access_control_list/t38J9Vao">Access control list</a></li> <li><a href="/facts/Attribute-based_access_control/G0e147WX">Attribute-based access control</a> (ABAC)</li> <li><a href="/facts/Capability-based_security/negzSwhS">Capability-based security</a></li> <li><a href="/facts/Context-based_access_control/44MjFtB1">Context-based access control</a> (CBAC)</li> <li><a href="/facts/Discretionary_access_control/MTQRM7nr">Discretionary access control</a> (DAC)</li> <li><a href="/facts/Graph-based_access_control/XFE4khqN">Graph-based access control</a> (GBAC)</li> <li><a href="/facts/Lattice-based_access_control/YokQf0Jw">Lattice-based access control</a> (LBAC)</li> <li><a href="/facts/Mandatory_access_control/yvtGFacq">Mandatory access control</a> (MAC)</li> <li><a href="/facts/Organisation-based_access_control/5tMMd2FH">Organisation-based access control</a> (OrBAC)</li> <li><a href="/facts/Role-based_access_control/dPN1ohBE">Role-based access control</a> (RBAC)</li> <li><a href="/facts/RSBAC/v80DmzH2">Rule-set-based access control (RSBAC)</a></li></ul> <ul><li><a href="https://patents.google.com/patent/US20050097320">U.S. patent 20,050,097,320</a></li></ul> <h2 id="references">References</h2> <ol> <li id="fn:1"><p>Wiefling, Stephan; Dürmuth, Markus; Lo Iacono, Luigi (2021-01-26). "What's in Score for Website Users: A Data-Driven Long-Term Study on Risk-Based Authentication Characteristics" (PDF). Financial Cryptography and Data Security. FC '21. Vol. 12675. pp. 361–381. arXiv:2101.10681. doi:10.1007/978-3-662-64331-0_19. ISBN 978-3-662-64330-3. S2CID 231709486. <a href="978-3-662-64330-3" target="_blank">978-3-662-64330-3</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li> <li id="fn:2"><p>US patent 9021555, Takaya Kato, "Risk-based authentication patent", issued March 29, 2006 <a href="https://worldwide.espacenet.com/textdoc?DB=EPODOC&IDX=US9021555" target="_blank">https://worldwide.espacenet.com/textdoc?DB=EPODOC&IDX=US9021555</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li> <li id="fn:3"><p>Wiefling, Stephan; Lo Iacono, Luigi; Dürmuth, Markus. "Information website on Risk-based Authentication". Risk-based Authentication. Retrieved 2019-04-29. <a href="https://riskbasedauthentication.org/" target="_blank">https://riskbasedauthentication.org/</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li> <li id="fn:4"><p>Wiefling, Stephan; Lo Iacono, Luigi; Dürmuth, Markus (2019). "Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild". In Dhillon, Gurpreet; Karlsson, Fredrik; Hedström, Karin; Zúquete, André (eds.). ICT Systems Security and Privacy Protection. IFIP Advances in Information and Communication Technology. Vol. 562. Springer International Publishing. pp. 134–148. arXiv:2003.07622. doi:10.1007/978-3-030-22312-0_10. ISBN 9783030223120. S2CID 189926752. <a href="9783030223120" target="_blank">9783030223120</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li> <li id="fn:5"><p>Williamson, G. (2006). "Enhanced Authentication In Online Banking" (PDF). Journal of Economic Crime Management. 4 (2): 18–19. <a href="http://utica.edu/academic/institutes/ecii/publications/articles/51D6D996-90F2-F468-AC09C4E8071575AE.pdf" target="_blank">http://utica.edu/academic/institutes/ecii/publications/articles/51D6D996-90F2-F468-AC09C4E8071575AE.pdf</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li> <li id="fn:6"><p>US patent 9021555, Takaya Kato, "Risk-based authentication patent", issued March 29, 2006 <a href="https://worldwide.espacenet.com/textdoc?DB=EPODOC&IDX=US9021555" target="_blank">https://worldwide.espacenet.com/textdoc?DB=EPODOC&IDX=US9021555</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li> <li id="fn:7"><p>Wiefling, Stephan; Dürmuth, Markus; Lo Iacono, Luigi (2020-12-07). "More Than Just Good Passwords? A Study on Usability and Security Perceptions of Risk-based Authentication". Annual Computer Security Applications Conference. ACSAC '20. Austin, USA: Association for Computing Machinery. pp. 203–218. arXiv:2010.00339. doi:10.1145/3427228.3427243. ISBN 978-1-4503-8858-0. <a href="978-1-4503-8858-0" target="_blank">978-1-4503-8858-0</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></p></li> <li id="fn:8"><p>Wiefling, Stephan; Lo Iacono, Luigi; Dürmuth, Markus. "Who uses RBA? We found evidence that Google, Facebook, LinkedIn, Amazon and GOG.com are using it". Risk-based Authentication. Retrieved 2019-04-29. <a href="https://riskbasedauthentication.org/" target="_blank">https://riskbasedauthentication.org/</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></p></li> <li id="fn:9"><p>Borky, John M.; Bradley, Thomas H. (2019). "Protecting Information with Cybersecurity". In Borky, John M.; Bradley, Thomas H. (eds.). Effective Model-Based Systems Engineering. Cham: Springer International Publishing. pp. 345–404. doi:10.1007/978-3-319-95669-5_10. ISBN 978-3-319-95669-5. PMC 7122347. Retrieved 2023-08-28. <a href="978-3-319-95669-5" target="_blank">978-3-319-95669-5</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></p></li> </ol>