{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,19]],"date-time":"2026-09-19T11:38:15Z","timestamp":1789817895360,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2009,7,15]],"date-time":"2009-07-15T00:00:00Z","timestamp":1247616000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/G020760\/1"],"award-info":[{"award-number":["EP\/G020760\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2009,7,15]]},"DOI":"10.1145\/1572532.1572543","type":"proceedings-article","created":{"date-parts":[[2009,7,28]],"date-time":"2009-07-28T12:45:28Z","timestamp":1248785128000},"page":"1-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":54,"title":["Personal choice and challenge questions"],"prefix":"10.1145","author":[{"given":"Mike","family":"Just","sequence":"first","affiliation":[{"name":"University of Edinburgh, Edinburgh, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Aspinall","sequence":"additional","affiliation":[{"name":"University of Edinburgh, Edinburgh, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2009,7,15]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"First International Workshop on Security for Spontaneous Interaction (IWIISI '07)","author":"Asgharpour F.","year":"2007","unstructured":"F. Asgharpour , M. Jakobsson , \" Adaptive Challenge Questions Algorithm in Password Reset\/Recovery,\" in First International Workshop on Security for Spontaneous Interaction (IWIISI '07) , Innsbruck, Austria , ( 2007 ). F. Asgharpour, M. Jakobsson, \"Adaptive Challenge Questions Algorithm in Password Reset\/Recovery,\" in First International Workshop on Security for Spontaneous Interaction (IWIISI '07), Innsbruck, Austria, (2007)."},{"key":"e_1_3_2_1_2_1","volume-title":"Cryptographic Communication Using Natural Entropy,\" to appear in Proceedings of the 17th International Workshop on Security Protocols","author":"Bonneau J.","year":"2009","unstructured":"J. Bonneau , \" Alice and Bob in Love : Cryptographic Communication Using Natural Entropy,\" to appear in Proceedings of the 17th International Workshop on Security Protocols 2009 , Cambridge , UK , April 2009. J. Bonneau, \"Alice and Bob in Love: Cryptographic Communication Using Natural Entropy,\" to appear in Proceedings of the 17th International Workshop on Security Protocols 2009, Cambridge, UK, April 2009."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-739X(99)00055-2"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/501983.501985"},{"issue":"1","key":"e_1_3_2_1_6_1","first-page":"18","article-title":"Messin' with Texas, Deriving Mother's Maiden Names Using Public Records","volume":"8","author":"Griffith V.","year":"2007","unstructured":"V. Griffith , M. Jakobsson , \" Messin' with Texas, Deriving Mother's Maiden Names Using Public Records ,\" RSA CryptoBytes , 8 ( 1 ), ( 2007 ), 18 -- 28 . V. Griffith, M. Jakobsson, \"Messin' with Texas, Deriving Mother's Maiden Names Using Public Records,\" RSA CryptoBytes, 8(1), (2007), 18--28.","journal-title":"RSA CryptoBytes"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/0306-4379(91)90005-T"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1357054.1357087"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.80"},{"key":"e_1_3_2_1_10_1","unstructured":"M. Just \"Designing Authentication Systems with Challenge Questions \" in Designing Secure Systems that People Can Use O'Reilly L. Faith-Cranor S. Garfinkel editors (2005).  M. Just \"Designing Authentication Systems with Challenge Questions \" in Designing Secure Systems that People Can Use O'Reilly L. Faith-Cranor S. Garfinkel editors (2005)."},{"key":"e_1_3_2_1_11_1","volume-title":"International Conference on the Technical and Socio-Economic Aspects of Trusted Computing","author":"Just M.","year":"2009","unstructured":"M. Just , D. Aspinall , \" Challenging Challenge Questions ,\" presented at Trust 2009 : International Conference on the Technical and Socio-Economic Aspects of Trusted Computing , 2009 . ( Available at {12}) M. Just, D. Aspinall, \"Challenging Challenge Questions,\" presented at Trust 2009: International Conference on the Technical and Socio-Economic Aspects of Trusted Computing, 2009. (Available at {12})"},{"key":"e_1_3_2_1_12_1","unstructured":"Knowledge-Based Authentication Project Site. http:\/\/homepages.inf.ed.ac.uk\/mjust\/KBA.html  Knowledge-Based Authentication Project Site. http:\/\/homepages.inf.ed.ac.uk\/mjust\/KBA.html"},{"key":"e_1_3_2_1_13_1","volume-title":"General (Revised),\" NIST Special Publication","author":"National Institute of Standards and Technology (NIST), \"Recommendation for Key Management - Part 1","year":"2007","unstructured":"National Institute of Standards and Technology (NIST), \"Recommendation for Key Management - Part 1 : General (Revised),\" NIST Special Publication 800-57, March 2007 . http:\/\/csrc.nist.gov\/groups\/ST\/toolkit\/documents\/SP800-57Part1_3-8-07.pdf National Institute of Standards and Technology (NIST), \"Recommendation for Key Management - Part 1: General (Revised),\" NIST Special Publication 800-57, March 2007. http:\/\/csrc.nist.gov\/groups\/ST\/toolkit\/documents\/SP800-57Part1_3-8-07.pdf"},{"key":"e_1_3_2_1_14_1","unstructured":"National Institute of Standards and Technology (NIST) \"Electronic Authentication Guideline \" NIST Special Publication 800-63 Version 1.0.2 April 2006. http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-63\/SP800-63V1_0_2.pdf  National Institute of Standards and Technology (NIST) \"Electronic Authentication Guideline \" NIST Special Publication 800-63 Version 1.0.2 April 2006. http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-63\/SP800-63V1_0_2.pdf"},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of Financial Cryptography '04","author":"O'Gorman L.","year":"2004","unstructured":"L. O'Gorman , S. Begga , J. Bentley , \"Call Center Customer Verification by Query-Directed Passwords,\" in Proceedings of Financial Cryptography '04 , International Financial Cryptography Association , ( 2004 ). L. O'Gorman, S. Begga, J. Bentley, \"Call Center Customer Verification by Query-Directed Passwords,\" in Proceedings of Financial Cryptography '04, International Financial Cryptography Association, (2004)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(00)07023-1"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1408664.1408667"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.11"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(94)90064-7"},{"key":"e_1_3_2_1_21_1","volume-title":"Scientific American, online feature posted","author":"Thompson H.","year":"2008","unstructured":"H. Thompson , \" How I Stole Someone's Identity\" , Scientific American, online feature posted August 18, 2008 . Retrieved from http:\/\/www.sciam.com\/article.cfm?id=anatomy-of-a-social-hack, 23rd February 2009. H. Thompson, \"How I Stole Someone's Identity\", Scientific American, online feature posted August 18, 2008. Retrieved from http:\/\/www.sciam.com\/article.cfm?id=anatomy-of-a-social-hack, 23rd February 2009."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1357054.1357086"},{"key":"e_1_3_2_1_23_1","unstructured":"U.S. Census Bureau 1990 Census - Names available at http:\/\/www.census.gov\/genealogy\/names\/names_files.html.  U.S. Census Bureau 1990 Census - Names available at http:\/\/www.census.gov\/genealogy\/names\/names_files.html."},{"key":"e_1_3_2_1_24_1","volume-title":"Frequently Occurring Surnames from Census","author":"U.S. Census Bureau","year":"2000","unstructured":"U.S. Census Bureau , Frequently Occurring Surnames from Census 2000 , available at http:\/\/www.census.gov\/genealogy\/www\/freqnames2k.html. U.S. Census Bureau, Frequently Occurring Surnames from Census 2000, available at http:\/\/www.census.gov\/genealogy\/www\/freqnames2k.html."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/36.3.227"}],"event":{"name":"SOUPS '09: Symposium on Usable Privacy and Security","location":"Mountain View California USA","acronym":"SOUPS '09","sponsor":["Carnegie Mellon CyLab","Google Inc.","SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the 5th Symposium on Usable Privacy and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1572532.1572543","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1572532.1572543","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:23:29Z","timestamp":1750249409000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1572532.1572543"}},"subtitle":["a security and usability assessment"],"short-title":[],"issued":{"date-parts":[[2009,7,15]]},"references-count":25,"alternative-id":["10.1145\/1572532.1572543","10.1145\/1572532"],"URL":"https:\/\/doi.org\/10.1145\/1572532.1572543","relation":{},"subject":[],"published":{"date-parts":[[2009,7,15]]},"assertion":[{"value":"2009-07-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}