Skip to main content

2015 | OriginalPaper | Buchkapitel

Can Single Sign-on Improve Password Management? A Focus Group Study

verfasst von : Norliza Katuk, Hatim Mohamad Tahir, Nur Haryani Zakaria, Mohamad Subri Halim

Erschienen in: Pattern Analysis, Intelligent Security and the Internet of Things

Verlag: Springer International Publishing

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

This article presents a research concerning password management and single sign-on for accessing Internet applications. Many Internet applications require users to subscribe to their services and authenticate themselves through the use of login credentials. The number of such applications is increasing exponentially, which caused ineffective login credential management among users. This study was conducted with two objectives (i) to identify how users manage their usernames and passwords and (ii) to examine whether users see the benefits of single sign-on. To achieve these objectives, a focus group interview was conducted on students from a local university. The results of the study suggested that the students did not practise proper password management. Further, it suggested that single sign-on may not be the immediate solution to improve the students’ password management.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literatur
1.
Zurück zum Zitat Zhang, J., Luo, X., Akkaladevi, S., Ziegelmayer, J.: Improving multiple-password recall: an empirical study. Eur. J. Inf. Syst. 18, 165–176 (2009)CrossRef Zhang, J., Luo, X., Akkaladevi, S., Ziegelmayer, J.: Improving multiple-password recall: an empirical study. Eur. J. Inf. Syst. 18, 165–176 (2009)CrossRef
2.
Zurück zum Zitat Cameron, K., Jones, M.B.: Design rationale behind the identity metasystem architecture. ISSE/SECURE 2007 Securing Electronic Business Processes, pp. 117–129. Springer, Berlin (2007)CrossRef Cameron, K., Jones, M.B.: Design rationale behind the identity metasystem architecture. ISSE/SECURE 2007 Securing Electronic Business Processes, pp. 117–129. Springer, Berlin (2007)CrossRef
3.
Zurück zum Zitat Riedel, M., Mallmann, D., Streit, A.: Enhancing scientific workflows with secure shell functionality in UNICORE grids. First International Conference on e-Science and Grid Computing, pp. 8–139. IEEE, New Jersey (2005) Riedel, M., Mallmann, D., Streit, A.: Enhancing scientific workflows with secure shell functionality in UNICORE grids. First International Conference on e-Science and Grid Computing, pp. 8–139. IEEE, New Jersey (2005)
4.
Zurück zum Zitat Florencio, D., Herley, C.: A large-scale study of web password habits. In: Proceedings of the 16th international conference on World Wide Web, pp. 657–666. ACM (2007) Florencio, D., Herley, C.: A large-scale study of web password habits. In: Proceedings of the 16th international conference on World Wide Web, pp. 657–666. ACM (2007)
5.
Zurück zum Zitat Bang, Y., Lee, D.-J., Bae, Y.-S., Ahn, J.-H.: Improving information security management: an analysis of ID–password usage and a new login vulnerability measure. Int. J. Inf. Manage. 32, 409–418 (2012)CrossRef Bang, Y., Lee, D.-J., Bae, Y.-S., Ahn, J.-H.: Improving information security management: an analysis of ID–password usage and a new login vulnerability measure. Int. J. Inf. Manage. 32, 409–418 (2012)CrossRef
6.
Zurück zum Zitat Ciampa, M., Revels, M., Enamait, J.: Online versus local password management applications: an analysis of user training and reactions. J. Appl. Secur. Res. 6, 449–466 (2011)CrossRef Ciampa, M., Revels, M., Enamait, J.: Online versus local password management applications: an analysis of user training and reactions. J. Appl. Secur. Res. 6, 449–466 (2011)CrossRef
7.
Zurück zum Zitat Summers, W.C., Bosworth, E.: Password policy: the good, the bad, and the ugly. In: Proceedings of the winter international symposium on information and communication technologies, pp. 1–6. Trinity College Dublin (2004) Summers, W.C., Bosworth, E.: Password policy: the good, the bad, and the ugly. In: Proceedings of the winter international symposium on information and communication technologies, pp. 1–6. Trinity College Dublin (2004)
8.
Zurück zum Zitat Tam, L., Glassman, M., Vandenwauver, M.: The psychology of password management: a tradeoff between security and convenience. Behav. Inf. Technol. 29, 233–244 (2010)CrossRef Tam, L., Glassman, M., Vandenwauver, M.: The psychology of password management: a tradeoff between security and convenience. Behav. Inf. Technol. 29, 233–244 (2010)CrossRef
9.
Zurück zum Zitat Kumar, N.: Password in practice: an usability survey. J. Glob. Res. Comput. Sci. 2, 107–112 (2011) Kumar, N.: Password in practice: an usability survey. J. Glob. Res. Comput. Sci. 2, 107–112 (2011)
10.
Zurück zum Zitat Ciampa, M.: Are password management applications viable? An analysis of user training and reactions. Inf. Syst. Educ. J. 9, 4 (2011) Ciampa, M.: Are password management applications viable? An analysis of user training and reactions. Inf. Syst. Educ. J. 9, 4 (2011)
11.
Zurück zum Zitat Hardy, G.: The truth behind single sign-on. Inf. Secur. Tech. Rep. 1, 46–55 (1996)CrossRef Hardy, G.: The truth behind single sign-on. Inf. Secur. Tech. Rep. 1, 46–55 (1996)CrossRef
12.
Zurück zum Zitat Clercq, J.D.: Single sign-on architectures. Proceedings of the International Conference on Infrastructure Security, pp. 40–58. Springer, Berlin (2002)CrossRef Clercq, J.D.: Single sign-on architectures. Proceedings of the International Conference on Infrastructure Security, pp. 40–58. Springer, Berlin (2002)CrossRef
13.
Zurück zum Zitat Radha, V., Reddy, D.H.: A survey on single sign-on techniques. Procedia Technol. 4, 134–139 (2012)CrossRef Radha, V., Reddy, D.H.: A survey on single sign-on techniques. Procedia Technol. 4, 134–139 (2012)CrossRef
Metadaten
Titel
Can Single Sign-on Improve Password Management? A Focus Group Study
verfasst von
Norliza Katuk
Hatim Mohamad Tahir
Nur Haryani Zakaria
Mohamad Subri Halim
Copyright-Jahr
2015
DOI
https://doi.org/10.1007/978-3-319-17398-6_8