Title: Performance Measures for Evaluating the Dynamic Authentication Techniques

Issue Number: Vol. 5, No. 2
Year of Publication: May - 2016
Page Numbers: 83-93
Authors: Jing-Chiou Liou
Journal Name: International Journal of Cyber-Security and Digital Forensics (IJCSDF)
- Hong Kong
DOI:  http://dx.doi.org/10.17781/P002052

Abstract:


Authentication is the process of verifying users’ credentials when access to secure IT systems. Today, most of the computer users rely on single factor static authentication. However, many severe security breaches in each year prompt us that we need to develop a better authentication mechanism. One solution is to adopt the multi-factor dynamic authentication. Nevertheless, it is financially not possible to implement multi-factor, even just two factor, authentication for all the computer users. In this paper, we will study currently available dynamic authentication techniques and evaluate their strength and weakness with both feasibility and security measures. We propose eight feasibility measures that can be categorized into two groups: cost and deployment. In addition, we also use five security measures to analyze their capability against security attacks. The comparison indicates there is no perfect solution to the authentication. However, software tokens, some of graphic user authentication (GUA) and the SiFaDA score highly in most categories.