SoK: Inaccessible & Insecure: An Exposition of Authentication Challenges Faced
summary
Authors develop the ALESA framework and apply 5 accessibility and 8 security metrics to 50 papers, evaluating 37 general-purpose and 13 dedicated schemes. The evaluation finds most general schemes are inaccessible yet only averagely secure, dedicated schemes show slightly better accessibility but are largely insecure, and only four dedicated methods pass accessibility in user studies. Many failures trace to screen reader interaction; proposed fixes include OS/AI-level detection of malicious prompts and calls for inclusive real-world validation.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:54Authentication mechanisms and vulnerabilities
- 4:47Authentication methods selection
- 6:56ELISA framework
- 9:27General authentication evaluation
- 10:53Dedicated authentication evaluation
- 12:16Broader takeaways
- 13:17Limitations and future work
- 14:42Conclusion
related talks
25mSecurity and Accessibility can be friends!
51mBalancing Accessibility, Security and AI: Design Inclusive Security Tools
49mA11y in Cybersecurity Panel
05m"I'm Literally Just Hoping This Will Work:'' Obstacles Blocking the Online Security
29mSecurity by(e) Design?
14mAccessible Accessibility
36mSaaC – Security as a Culture, the Distributed Advocacy
30mInsecurity protocols: an overview of modern authentication