2026
Comparing a Store-less Password Manager with Traditional Password-Only Authentication
Mohammed Jubur, Maliheh Shirvanian, Salahaldeen Duraibi, Nitesh Saxena
IEEE Internet Computing
Research theme 06
Usable Security
Security mechanisms evaluated through both technical protection and human use.
Research question
How can security controls align with people’s capabilities, goals, and contexts?
Usable security treats protection as an experience people must operate, not an isolated technical property. The work studies friction, cognitive load, risk communication, and the conditions in which usability strengthens rather than weakens security.
Evidence
Related publications
Only verified records tagged with this research theme appear here.
2026
2025
An In-Depth Analysis of Password Managers and Two-Factor Authentication Tools
Mohammed Jubur, Prakash Shrestha, Nitesh Saxena
ACM Computing Surveys
2025
Usability and Security Analysis of the Compare-and-Confirm Method in Mobile Push-Based Two-Factor Authentication
Mohammed Jubur, Nitesh Saxena, Faheem A. Reegu
IEEE Transactions on Mobile Computing
2024
Breaching Security Keys without Root: FIDO2 Deception Attacks via Overlays Exploiting Limited Display Authenticators
Ahmed Tanvir Mahdad, Mohammed Jubur, Nitesh Saxena
ACM CCS
2023
Breaking Mobile Notification-Based Authentication with Concurrent Attacks Outside of Mobile Devices
Ahmed Tanvir Mahdad, Mohammed Jubur, Nitesh Saxena
ACM MobiCom
2021
Bypassing Push-Based Second Factor and Passwordless Authentication with Human-Indistinguishable Notifications
Mohammed Jubur, Prakash Shrestha, Nitesh Saxena, Jay Prakash
ACM AsiaCCS
2021
Countering Concurrent Login Attacks in Just Tap Push-Based Authentication: A Redesign and Usability Evaluations
Jay Prakash, Clarice C. Q. Yu, Tanvi R. Thombre, Andrei Bytes, Mohammed Jubur, Nitesh Saxena, Lucienne Blessing, Jianying Zhou, Tony Q. S. Quek
IEEE EuroS&P
Learn
Related explanations
Educational articles connect research questions with clear, accessible explanations.
Research Deep Dive
Password Manager Risks: How Vaults Are Targeted—and How to Protect Them
A balanced threat analysis of endpoint attacks, synchronized vaults, phishing, and malicious extensions, with practical defenses.
Research Deep DiveWhy Use SMS OTP—and When Do Hardware Tokens Make Sense?
Follow an SMS code from server to phone, examine channel and phishing risks, and compare it with independent TOTP and HOTP devices.