Answers are grounded in this paper and cite their sources.
The author describes a framework for designing user authentication systems with challenge questions that includes privacy, security, and usability criteria for evaluating a candidate challenge-question system. The proposed challenge-question system for recovering user credentials is based on this framework.
No takes yet. Share an insight, caveat, or question.
Mike Just (2004) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: