2026
Comparing a Store-less Password Manager with Traditional Password-Only Authentication
Mohammed Jubur, Maliheh Shirvanian, Salahaldeen Duraibi, Nitesh Saxena
IEEE Internet Computing
Research theme 01
Authentication Security
How authentication systems resist compromise while remaining workable in real settings.
Research question
How can authentication protect accounts without shifting unreasonable burdens to people?
This theme examines threats against sign-in, the design choices that shape user behavior, and the relationship between technical strength and practical use. The goal is authentication that withstands attack while remaining understandable in real settings.
Evidence
Related publications
Only verified records tagged with this research theme appear here.
2025
Building and Testing a Hidden-Password Online Password Manager
Mohammed Jubur, Christopher R. Price, Maliheh Shirvanian, Nitesh Saxena, Stanislaw Jarecki, Hugo Krawczyk
IEEE Transactions on Information Forensics and Security
2025
Usability and Security Analysis of the Compare-and-Confirm Method in Mobile Push-Based Two-Factor Authentication
Mohammed Jubur, Nitesh Saxena, Faheem A. Reegu
IEEE Transactions on Mobile Computing
2023
Breaking Mobile Notification-Based Authentication with Concurrent Attacks Outside of Mobile Devices
Ahmed Tanvir Mahdad, Mohammed Jubur, Nitesh Saxena
ACM MobiCom
2021
Countering Concurrent Login Attacks in Just Tap Push-Based Authentication: A Redesign and Usability Evaluations
Jay Prakash, Clarice C. Q. Yu, Tanvi R. Thombre, Andrei Bytes, Mohammed Jubur, Nitesh Saxena, Lucienne Blessing, Jianying Zhou, Tony Q. S. Quek
IEEE EuroS&P
2021
Two-Factor Password-Authenticated Key Exchange with End-to-End Security
Stanislaw Jarecki, Mohammed Jubur, Hugo Krawczyk, Maliheh Shirvanian, Nitesh Saxena
ACM Transactions on Privacy and Security
Learn
Related explanations
Educational articles connect research questions with clear, accessible explanations.
Introduction
Password Managers: A Practical Way to Manage Digital Security
Why password managers make unique credentials realistic, plus the benefits and limitations to understand before choosing one.
IntroductionPasswords: The Foundation of Authentication—and Its Security Limits
How passwords work, why guessing, phishing, and reuse remain dangerous, and which practices reduce those risks.
Research Deep DiveWhy Use SMS OTP—and When Do Hardware Tokens Make Sense?
Follow an SMS code from server to phone, examine channel and phishing risks, and compare it with independent TOTP and HOTP devices.
IntroductionTwo-Factor Authentication: An Extra Layer That Is Not Always Equal
An introduction to authentication factors and common 2FA methods, separating added protection from genuine phishing resistance.