Evaluating User Perception of Multi-Factor Authentication: A Systematic Review

In Proceedings of the Thirteenth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2019)

10 Pages Posted: 19 Aug 2019 Last revised: 7 Jul 2020

See all articles by Sanchari Das

Sanchari Das

University of Denver

Bingxing Wang

Indiana University Bloomington

Zachary Tingle

Indiana University Bloomington

L. Jean Camp

Indiana University Bloomington - School of Informatics and Computing

Date Written: July 15, 2019

Abstract

Security vulnerabilities of traditional single factor authentication has become a major concern for security practitioners and researchers. To mitigate single point failures, new and technologically advanced Multi-Factor Authentication (MFA) tools have been developed as security solutions. However, the usability and adoption of such tools have raised concerns. An obvious solution can be viewed as conducting user studies to create more user-friendly MFA tools. To learn more, we performed a systematic literature review of recently published academic papers (N = 623) that primarily focused on MFA technologies. While majority of these papers (m = 300) proposed new MFA tools, only 9.1% of papers performed any user evaluation research. Our meta-analysis of user focused studies (n = 57) showed that researchers found lower adoption rate to be inevitable for MFAs, while avoidance was pervasive among mandatory use. Furthermore, we noted several reporting and methodological discrepancies in the user focused studies. We identified trends in participant recruitment that is indicative of demographic biases.

Keywords: Multi Factor Authentication, User Studies, Systematic Literature Review

Suggested Citation

Das, Sanchari and Wang, Bingxing and Tingle, Zachary and Camp, L. Jean, Evaluating User Perception of Multi-Factor Authentication: A Systematic Review (July 15, 2019). In Proceedings of the Thirteenth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2019), Available at SSRN: https://ssrn.com/abstract=3438207

Sanchari Das (Contact Author)

University of Denver ( email )

2201 S. Gaylord St
Denver, CO 80208-2685
United States

Bingxing Wang

Indiana University Bloomington ( email )

Dept of Biology
100 South Indiana Ave.
Bloomington, IN 47405
United States

Zachary Tingle

Indiana University Bloomington ( email )

Dept of Biology
100 South Indiana Ave.
Bloomington, IN 47405
United States

L. Jean Camp

Indiana University Bloomington - School of Informatics and Computing ( email )

901 E 10th St
Bloomington, IN 47401
United States

Do you have negative results from your research you’d like to share?

Paper statistics

Downloads
95
Abstract Views
599
Rank
498,915
PlumX Metrics