Stronger Password Authentication Using Browser Extensions

By B. Ross, Collin Jackson, N. Miyake, Dan Boneh, John C. Mitchell. USENIX Security Symposium, 2005

461 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/e5a962102f95e65ff551b8c4949775ae9ff4d4c2

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Flicker: an execution infrastructure for tcb minimization (2008, background): “, PwdHash [25]) exist to ensure varied user passwords across servers, SSH provides a useful illustration”
A Usability Study and Critique of Two Password Managers (2006, methodology): “ently provide novice users with the benefits of password practices that are otherwise only feasible for security experts” [24].”
An Empirical Analysis of Phishing Blacklists (2009, background): “[8, 36, 31, 37]) are needed to overcome the initial limited blacklist coverage problem.”
On the Effectiveness of Techniques to Detect Phishing Sites (2007, unknown): “Well-known solutions in literature are SpoofGuard [3, 26] and PwdHash [24, 23].”
A large-scale study of web password habits (2007, background): “Various Password Management systems offer to assist users by having a single sign-on using a master password [7, 13].”
Examining the impact of website take-down on phishing (2007, background): “There have been many proposals for browser mechanisms to detect phishing websites [14, 24], and schemes to prevent users from disclosing their secrets to them [ 17 ].”
The Tangled Web of Password Reuse (2014, background): “Here is an example policy: I. Passwords must not contain the user’s entire name/user ID.”
Graphical passwords: Learning from the first twelve years (2012, background): “Keystroke loggers [Ross et al. 2005] record keyboard input; mouse loggers and screen scrapers capture mouse actions and record screen memory, to be sent remotely or made available for retrieval.”
Guessing human-chosen secrets (2012, background): “in the PwdHash browser extension which also supports roaming access to domain-specific passwords and has been installed by about 100,000 Mozilla Firefox users [254], though this is a tiny fraction of the total user base.”