Research agenda
Authentication is more than a technical checkpoint.
It is a system where mechanisms, interfaces, decisions, and recovery paths meet. This research agenda examines that whole system through security and usability.
Authentication & Digital Identity Security
Securing digital identity systems against phishing, credential compromise, and authentication abuse without making legitimate access harder.
02Multi-Factor & Push Authentication
Understanding when additional authentication factors strengthen security—and when push prompts, notification fatigue, or weak request binding create new risks.
03Passwordless & Phishing-Resistant Authentication
Exploring authentication mechanisms that reduce dependence on passwords while strengthening resistance to phishing and credential theft.
04Password Managers & Store-less Credential Systems
Designing and evaluating credential-management systems that reduce password reuse, vault exposure, and the burden of managing accounts across services and devices.
05Web Authentication & Identity Flows
Studying how authentication requests, browser sessions, identity providers, and relying parties interact across modern web systems.
06Human-Centered Security & Security Usability
Studying how interface design, attention, context, and user behavior influence whether security mechanisms succeed under real conditions.