Reese, K., Smith, T., Dutson, J., Armknecht, J., Cameron, J. and Seamons, K. (2019) A Usability Study of Five Two-Factor Authentication Methods. Proceedings of the Fifteenth USENIX Conference on Usable Privacy and Security, Santa Clara, 12-13 August 2019, 357-370.

has been cited by the following article:

• TITLE: Development of Two-Factor Authentication to Mitigate Phishing Attack

  AUTHORS: Varun Dixit, Davinderjit Kaur

  KEYWORDS: Two Factor Authentication, 2FA, Phishing Attack, Fixed 2FA, TOTP, HMAC

  JOURNAL NAME: Journal of Software Engineering and Applications, Vol.17 No.11, November 6, 2024

  ABSTRACT: The two-factor authentication mechanism is gaining popularity as more people are becoming aware of the need to secure their identities. In the current form, existing 2FA systems are defenseless against phishing attacks. They do not provide any visual indicator to the user to check the website’s validity before logging in during phishing attacks. This exposes the user’s password during the phishing attack. Two-factor authentication needs to be enhanced to provide a mechanism to detect phishing attacks without adding a significant burden on the user. This research paper will propose a novel 2-FA TOTP mechanism to provide a subconscious indicator during a phishing attack. In comparison, the new proposed novel approach provides better security against phishing attack. Lastly, the mathematical analysis is performed to understand the TOTP variance and validate the security considerations against the existing 2FA systems with respect to adversary attack.