fido.bib

% This bib is all about FIDO, UAF, U2F, FIDO2, caBLE, CTAP, CTAP2, Web Authentication, WebAuthn, Passkeys, Passwordless, Security Keys etc.
% This file is in alphabetical order of lastname-year-keyword, e.g., ur-17-data-driven-psm
% This way it is easy to avoid and detect duplicate entries.
%
% To add a new entry, copy an existing one to the correct position in the file, and edit/update ALL fields.
%
% Common issues
% USENIX Association -> USENIX
% ACM SIGSAC Conference -> ACM Conference
% The Who Are You -> Who Are You?!
% missing month
% SOUPS '18 -> SOUPS~'18
% van Oorschot, Paul C. -> Van Oorschot, Paul C.
% Cranor, Lorrie -> Cranor, Lorrie Faith

% Approved all correct
@inproceedings{alam-19-webauthn-developer,
    author = {Alam, Aftab and Krombholz, Katharina and Bugiel, Sven},
    title = {{Poster: Let History Not Repeat Itself (This Time) -- Tackling WebAuthn Developer Issues Early On}},
    booktitle = {ACM Conference on Computer and Communications Security},
    year = {2019},
    series = {CCS~'19},
    pages = {2669--2671},
    address = {London, United Kingdom},
    month = nov,
    publisher = {ACM}
}

% Approved all correct
@article{arora-22-fido-recovery,
    author = {Arora, Sunpreet S. and Badrinarayanan, Saikrishna and Raghuraman, Srinivasan and Shirvanian, Maliheh and Wagner, Kim and Watson, Gaven},
    title = {{Avoiding Lock Outs: Proactive FIDO Account Recovery using Managerless Group Signatures}},
    journal = {Cryptology ePrint Archive},
    year = {2022},
    volume = {2022/1555},
    number = {},
    pages = {1--46},
    month = nov
} % UPDATE REQUIERED

% Approved all correct
@inproceedings{bonneau-12-the-quest,
    author = {Bonneau, Joseph and Herley, Cormac and Van Oorschot, Paul C. and Stajano, Frank},
    title = {{The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes}},
    booktitle = {IEEE Symposium on Security and Privacy},
    year = {2012},
    series = {SP~'12},
    pages = {553--567},
    address = {San Jose, California, USA},
    month = may,
    publisher = {IEEE}
}

% Approved all correct
@inproceedings{chakraborty-19-sim-fido,
    author = {Chakraborty, Dhiman and Bugiel, Sven},
    title = {{SimFIDO: FIDO2 User Authentication with SimTPM}},
    booktitle = {ACM Conference on Computer and Communications Security},
    year = {2019},
    series = {CCS~'19},
    pages = {2569--2571},
    address = {London, United Kingdom},
    month = nov,
    publisher = {ACM}
}

% Approved all correct
@inproceedings{ciolino-19-u2f-usability,
    author = {Ciolino, St{\'e}phane and Parkin, Simon and Dunphy, Paul},
    title = {{Of Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability through Device Comparison and Experience Sampling}},
    booktitle = {Symposium on Usable Privacy and Security},
    year = {2019},
    series = {SOUPS~'19},
    pages = {339--356},
    address = {Santa Clara, California, USA},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@inproceedings{cristofaro-14-2fa,
    author = {De Cristofaro, Emiliano and Du, Honglu and Freudiger, Julien and Norcie, Greg},
    title = {{A Comparative Usability Study of Two-Factor Authentication}},
    booktitle = {Workshop on Usable Security},
    year = {2014},
    series = {USEC~'14},
    pages = {},
    address = {San Diego, California, USA},
    month = feb,
    publisher = {ISOC}
} % USEC does not have page numbers

% Approved all correct
@inproceedings{das-18-security-key,
    author = {Das, Sanchari and Dingman, Andrew and Camp, L. Jean},
    title = {{Why Johnny Doesn't Use Two Factor: A Two-Phase Usability Study of the FIDO U2F Security Key}},
    booktitle = {Financial Cryptography and Data Security},
    year = {2018},
    series = {FC~'18},
    pages = {160--179},
    address = {Nieuwpoort, Curacao},
    month = feb,
    publisher = {Springer}
}

% Approved all correct
@inproceedings{farke-20-fido2,
    author = {Farke, Florian M. and Lorenz, Lennart and Schnitzler, Theodor and Markert, Philipp and D\"urmuth, Markus},
    title = {{``You still use the password after all'' -- Exploring FIDO2 Security Keys in a Small Company}},
    booktitle = {Symposium on Usable Privacy and Security},
    year = {2020},
    series = {SOUPS~'20},
    pages = {19--35},
    address = {Virtual Conference},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@misc{fido-20-supported-browsers,
    author = {{Fast IDentity Online (FIDO) Alliance}},
    title = {{Support for FIDO2: WebAuthn and CTAP -- Browsers and Platforms}},
    note = {\url{https://fidoalliance.org/fido2/fido2-web-authentication-webauthn/}, as of \today},
    month = jun,
    year = {2020}
}

% Approved all correct
@misc{fido-20-explanation,
    author = {{Fast IDentity Online (FIDO) Alliance}},
    title = {{How FIDO Works}},
    note = {\url{https://fidoalliance.org/how-fido-works/}, as of \today},
    month = aug,
    year = {2020}
}

% Approved all correct
@misc{goodegear-18-webauthn-explanation,
    author = {Goodegear, Lauren},
    title = {{Our Password-Free Future Is Near (But Not Really)}},
    note = {\url{https://www.wired.com/story/webauthn-in-browsers/}, as of \today},
    month = apr,
    year = {2018}
}

% Approved all correct
@article{grosse-13-auth-scale,
    author = {Grosse, Eric and Upadhyay, Mayank},
    title = {{Authentication at Scale}},
    journal = {IEEE Security \& Privacy},
    year = {2013},
    volume = {11},
    number = {1},
    pages = {15--22},
    month = jan,
    publisher = {IEEE}
}

% Approved all correct
@misc{hachman-19-webauthn-explanation,
    author = {Hachman, Mark},
    title = {{Webauthn: What You Need to Know About the Future of the Passwordless Web}},
    note = {\url{https://www.pcworld.com/article/3355240/}, as of \today},
    month = mar,
    year = {2019}
}

% Approved all correct
@misc{hackett-15-yahoo-kill-password,
    author = {Hackett, Robert},
    title = {{Yahoo: Sayonara, Passwords}},
    note = {\url{http://fortune.com/2015/10/16/yahoo-password-security/}, as of \today},
    month = oct,
    year = {2015}
}

% Approved all correct
@article{herley-12-pw-persistence,
    author = {Herley, Cormac and Van Oorschot, Paul C.},
    title = {{A Research Agenda Acknowledging the Persistence of Passwords}},
    journal = {IEEE Security \& Privacy},
    year = {2012},
    volume = {10},
    number = {1},
    pages = {28--36},
    month = jan,
    publisher = {IEEE}
}

% Approved all correct
@misc{hern-16-google-kill-password,
    author = {Hern, Alex},
    title = {{Google Aims to Kill Passwords}},
    note = {\url{https://www.theguardian.com/technology/2016/may/24/google-passwords-android}, as of \today},
    month = may,
    year = {2016}
}

% Approved all correct
@inproceedings{keil-22-german-id-fido, 
    author = {Keil, Markus and Markert, Philipp and D\"{u}rmuth, Markus},
    title = {{``It's Just a Lot of Prerequisites'': A User Perception and Usability Analysis of the German ID Card as a FIDO2 Authenticator}},
    booktitle = {European Symposium on Usable Security},
    year = {2022},
    series = {EuroUSEC~'22},
    pages = {172--188},
    address = {Karlsruhe, Germany},
    month = sep,
    publisher = {ACM}
}

% Approved all correct
@misc{kotadia-04-gates-password-dead,
    author = {Kotadia, Munir},
    title = {{Gates Predicts Death of the Password}},
    note = {\url{https://www.cnet.com/news/gates-predicts-death-of-the-password/}, as of \today},
    month = feb,
    year = {2004}
}

% Approved all correct
@misc{krebs-18-u2f-no-phishing,
    author = {Krebs, Brian},
    title = {{Google: Security Keys Neutralized Employee Phishing}},
    note = {\url{https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-employee-phishing/}, as of \today},
    month = jul,
    year = {2018}
}

% Approved all correct
@inproceedings{kunke-21-fido-recovery,
    author = {Kunke, Johannes and Wiefling, Stephan and Ullmann, Markus and Lo Iacono, Luigi},
    title = {{Evaluation of Account Recovery Strategies with FIDO2-based Passwordless Authentication}},
    booktitle = {Open Identity Summit},
    year = {2021},
    series = {ODI~'21},
    pages = {59--70},
    address = {Copenhagen, Denmark},
    month = jun,
    publisher = {GI}
}

% Approved all correct
@inproceedings{lassak-21-webauthn-misconceptions,
    author = {Lassak, Leona and Hildebrandt, Annika and Golla, Maximilian and Ur, Blase},
    title = {{``It's Stored, Hopefully, on an Encrypted Server'': Mitigating Users' Misconceptions About FIDO2 Biometric WebAuthn}},
    booktitle = {USENIX Security Symposium},
    year = {2021},
    series = {SSYM~'21},
    pages = {91--108},
    address = {Virtual Conference},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@misc{lundberg-19-webauthn,
    author = {Balfanz, Dirk  and Czeskis, Alexei and Hodges, Jeff and Jones, J.C. and Jones, Michael B. and Kumar, Akshay and Liao, Angelo and Lindemann, Rolf and Lundberg, Emil},
    title = {{Web Authentication: An API for Accessing Public Key Credentials -- Level 1}},
    note = {\url{https://www.w3.org/TR/2019/REC-webauthn-1-20190304/}, as of \today},
    month = mar,
    year = {2019}
}

% Approved all correct
@inproceedings{lyastani-20-kingslayer,
    author = {Lyastani, Sanam Ghorbani and Schilling, Michael and Neumayr, Michaela and Backes, Michael and Bugiel, Sven},
    title = {{Is FIDO2 the Kingslayer of User Authentication? A Comparative Usability Study of FIDO2 Passwordless Authentication}},
    booktitle = {IEEE Symposium on Security and Privacy},
    year = {2020},
    series = {SP~'20},
    pages = {268--285},
    address = {Virtual Conference},
    month = may,
    publisher = {IEEE}
}

% Approved all correct
@inproceedings{macgregor-19-uds-android-sec-key,
    author = {MacGregor, Robbie},
    title = {{Evaluating the Android Security Key Scheme: An Early Usability, Deployability, Security Evaluation with Comparative Analysis}},
    booktitle = {Who Are You?! Adventures in Authentication Workshop},
    year = {2019},
    series = {WAY~'19},
    pages = {1--6},
    address = {Santa Clara, California, USA},
    month = aug,
    publisher = {}
} % No publisher

% Approved all correct
@inproceedings{oogami-20-webauthn-yahoo,
    author = {Oogami, Wataru and Gomi, Hidehito and Yamaguchi, Shuji and Yamanaka, Shota and Higurashi, Tatsuru},
    title = {{Poster: Observation Study on Usability Challenges for Fingerprint Authentication Using WebAuthn-enabled Android Smartphones}},
    booktitle = {Symposium on Usable Privacy and Security},
    year = {2020},
    series = {SOUPS~'20},
    pages = {},
    address = {Virtual Conference},
    month = aug,
    publisher = {USENIX}
} % No page numbers for posters

% Approved all correct
@inproceedings{owens-20-fido2-smartphones,
    author = {Owens, Kentrell and Ur, Blase and Anise, Olabode},
    title = {{A Framework for Evaluating the Usability and Security of Smartphones as FIDO2 Roaming Authenticators}},
    booktitle = {Who Are You?! Adventures in Authentication Workshop},
    year = {2020},
    series = {WAY~'20},
    pages = {1--5},
    address = {Virtual Conference},
    month = aug,
    publisher = {}
} % No publisher

% Approved all correct
@inproceedings{owens-21-roaming,
    author = {Owens, Kentrell and Anise, Olabode and Krauss, Amanda and Ur, Blase},
    title = {{User Perceptions of the Usability and Security of Smartphones as FIDO2 Roaming Authenticators}},
    booktitle = {Symposium on Usable Privacy and Security},
    year = {2021},
    series = {SOUPS~'21},
    pages = {57--76},
    address = {Virtual Conference},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@inproceedings{reese-19-comp-five-2fa,
    author = {Reese, Ken and Smith, Trevor and Dutson, Jonathan and Armknecht, Jonathan and Cameron, Jacob and Seamons, Kent},
    title = {{A Usability Study of Five Two-Factor Authentication Methods}},
    booktitle = {Symposium on Usable Privacy and Security},
    year = {2019},
    series = {SOUPS~'19},
    pages = {357--370},
    address = {Santa Clara, California, USA},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@inproceedings{reynolds-20-measure-2fa-usability,
    author = {Reynolds, Joshua and Samarin, Nikita and Barnes, Joseph and Judd, Taylor and Mason, Joshua and Bailey, Michael and Egelman, Serge},
    title = {{Empirical Measurement of Systemic 2FA Usability}},
    booktitle = {USENIX Security Symposium},
    year = {2020},
    series = {SSYM~'20},
    pages = {127--143},
    address = {Virtual Conference},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@phdthesis{takakuwa-19-phd-thesis,
    author = {Takakuwa, Alex},
    title = {{Moving from Passwords to Authenticators}},
    year = {2019},
    school = {University of Washington}
}

% Approved all correct
@inproceedings{ulqinaku-21-fido-phish,
    author = {Ulqinaku, Enis and Assal, Hala and Abdou, AbdelRahman and Chiasson, Sonia and Capkun, Srdjan},
    title = {{Is Real-time Phishing Eliminated with FIDO? Social Engineering Downgrade Attacks against FIDO Protocols}},
    booktitle = {USENIX Security Symposium},
    year = {2021},
    series = {SSYM~'21},
    pages = {3811--3828},
    address = {Virtual Conference},
    month = aug,
    publisher = {USENIX}
}

% Approved all correct
@misc{yubico-20-explanation,
    author = {{Yubico, Inc.}},
    title = {{What is WebAuthn?}},
    note = {\url{https://www.yubico.com/authentication-standards/webauthn/}, as of \today},
    month = aug,
    year = {2020}
}