Current Multi-factor of Authentication: Approaches, Requirements, Attacks and Challenges

Abstract

Now-a-days, with the rapid and broad emergence of local or remote access to services on the internet. Authentication represents an important security control requirement and the MFA is recommended to mitigate the weaknesses in the SFA. MFA techniques can be classified into two main approaches: based biometric and non-biometric approaches. However, there is a problem to maintain the tradeoff between security and accuracy. The studies that have been reviewed on both authentication mechanisms are found contradictory in the direction of others. In the direction of authentication-based biometrics the researchers tended to increase the recognition accuracy, while in the other direction, the researchers proposed to combine many authentication factors to increase the security layers. The main contribution of this survey is to review and spotlight on the current state of the arts in both authentication mechanisms to achieve a secure user identity. This paper provides a review of authentication protocols and security requirements. In addition to a detailed review with a comparison of secure one-time passcode generation and distribution. Furthermore, a comprehensive review of cancelable biometrics techniques, attacks, and requirements. Finally, providing a summary of key challenges and future research directions.

A comprehensive survey on social engineering-based attacks on social networks

“…Multi-factor authentication (MFA) solutions, designed for user-friendliness, should be widely adopted, with clear guidance provided on their setup and usage (Mohammed et al, 2023). Collaborative incident response planning involving cross-functional teams and tabletop exercises ensures a coordinated and efficient response to social engineering incidents.…”

Usability Testing of Memorable Word in Security Enhancing in e-Government and e-Financial Systems

“…Push authentication requires the user to receive a push notification on their smartphone to approve or deny a login attempt. This method is advantageous because it eliminates the need for users to type in numbers, as required by other 2FA methods, making it both faster and more user-friendly [18]. Additionally, push authentication requires Internet access, which is necessary to keep communication between the user's device and the server secure, such as through TLS.…”

A standard ranking algorithm for robust iris template protection

“…These techniques, including those applied to irises [1], have become integral in contemporary stringent security systems, necessitating user authentication based on cancelable biometrics methods. Iris biometrics, owing to its unique and stable physiological traits, has garnered significant interest over the past decade [2]. Its application in authentication systems stands out as a preferred alternative to traditional methods, reducing reliance on passwords and tokens [3], especially given its irrevocable nature.…”