2026
Research theme 02
MFA & Two-Factor Authentication
The security and usability of second-factor and push-based authentication experiences.
Research question
Where do multi-factor mechanisms succeed, and where do interaction patterns introduce new failure modes?
The work studies push authentication, notification flooding, concurrent sign-in attempts, and compare-and-confirm interactions. It asks how a second-factor interface can help people recognize context and make the correct security decision.
Evidence
Related publications
Only verified records tagged with this research theme appear here.
2025
An In-Depth Analysis of Password Managers and Two-Factor Authentication Tools
Mohammed Jubur, Prakash Shrestha, Nitesh Saxena
ACM Computing Surveys
2025
Usability and Security Analysis of the Compare-and-Confirm Method in Mobile Push-Based Two-Factor Authentication
Mohammed Jubur, Nitesh Saxena, Faheem A. Reegu
IEEE Transactions on Mobile Computing
2023
Breaking Mobile Notification-Based Authentication with Concurrent Attacks Outside of Mobile Devices
Ahmed Tanvir Mahdad, Mohammed Jubur, Nitesh Saxena
ACM MobiCom
2021
Bypassing Push-Based Second Factor and Passwordless Authentication with Human-Indistinguishable Notifications
Mohammed Jubur, Prakash Shrestha, Nitesh Saxena, Jay Prakash
ACM AsiaCCS
2021
Countering Concurrent Login Attacks in Just Tap Push-Based Authentication: A Redesign and Usability Evaluations
Jay Prakash, Clarice C. Q. Yu, Tanvi R. Thombre, Andrei Bytes, Mohammed Jubur, Nitesh Saxena, Lucienne Blessing, Jianying Zhou, Tony Q. S. Quek
IEEE EuroS&P
2021
Two-Factor Password-Authenticated Key Exchange with End-to-End Security
Stanislaw Jarecki, Mohammed Jubur, Hugo Krawczyk, Maliheh Shirvanian, Nitesh Saxena
ACM Transactions on Privacy and Security
Learn
Related explanations
Educational articles connect research questions with clear, accessible explanations.
Research Deep Dive
Why Use SMS OTP—and When Do Hardware Tokens Make Sense?
Follow an SMS code from server to phone, examine channel and phishing risks, and compare it with independent TOTP and HOTP devices.
IntroductionTwo-Factor Authentication: An Extra Layer That Is Not Always Equal
An introduction to authentication factors and common 2FA methods, separating added protection from genuine phishing resistance.