Mohammed JuburDigital Identity Security

Research theme 02

Multi-Factor & Push Authentication

Understanding when additional authentication factors strengthen security—and when push prompts, notification fatigue, or weak request binding create new risks.

Research question

How can MFA help users distinguish a legitimate authentication request from one initiated or manipulated by an attacker?

This theme focuses on push-based MFA, two-factor authentication, number matching, compare-and-confirm interfaces, notification flooding, concurrent login attempts, and authentication relay risks. The work evaluates both technical defenses and user behavior to understand why false approvals occur and how stronger context, request binding, and interface design can reduce them.

Evidence

Related publications

Only verified records tagged with this research theme appear here.

Learn

Related explanations

Educational articles connect research questions with clear, accessible explanations.

Introduction

Understanding Authentication as a System

Authentication is more than checking a password, code, biometric, or passkey. A secure authentication system must be understood across enrollment, sign-in, user decisions, request context, credential changes, recovery, and the sessions it creates.