A novel Two-Factor HoneyToken Authentication Mechanism Vassilis Papaspirou Leandros Maglaras Mohamed Amine Ferrag Department of Computer Science Cyber Technology Institute Department of Computer Science University of Thessaly De Montfort University University of Guelma Volos, Greece Leicester, UK Guelma, Algeria
[email protected] [email protected] [email protected] Ioanna Kantzavelou Helge Janicke Christos Douligeris Department of Informatics Cyber Security Cooperative Research Centre Department of Informatics University of West of Attica Edith Cowan University University of Piraeus Athens, Greece Australia
[email protected] [email protected] [email protected] Abstract—The majority of systems rely on user authentication guessing, etc. Several best practices have been suggested on passwords, but passwords have so many weaknesses and for the use of passwords. Some of them are very difficult widespread use that easily raise significant security concerns, to use and others do not fulfill the security needs of the regardless of their encrypted form. Users hold the same password for different accounts, administrators never check password files organization. To overcome the password problem, two factor for flaws that might lead to a successful cracking, and the lack of authentication using devices such as tokens and ATM cards a tight security policy regarding regular password replacement has been suggested and has been shown to be difficult to hack are a few problems that need to be addressed. The proposed re- [2]. There are several limitations of two-factor authentication, search work aims at enhancing this security mechanism, prevent including the cost of purchasing, issuing, and handling tokens penetrations, password theft, and attempted break-ins towards securing computing systems.