Mohammed JuburDigital Identity Security

Research theme 01

Authentication & Digital Identity Security

Securing digital identity systems against phishing, credential compromise, and authentication abuse without making legitimate access harder.

Research question

How can authentication systems verify the right person, request, and session while remaining clear enough to use correctly?

This research examines authentication as both a security protocol and a user-facing decision process. It studies how credentials, requests, sessions, and relying-party context are bound together, where attackers can exploit gaps between them, and how system design can reduce those opportunities. The goal is authentication that remains secure not only in protocol specifications, but also under realistic attacks and everyday use.

Evidence

Related publications

Only verified records tagged with this research theme appear here.

Learn

Related explanations

Educational articles connect research questions with clear, accessible explanations.

Introduction

Understanding Authentication as a System

Authentication is more than checking a password, code, biometric, or passkey. A secure authentication system must be understood across enrollment, sign-in, user decisions, request context, credential changes, recovery, and the sessions it creates.

Introduction

Passwords: The Foundation of Authentication—and Its Security Limits

How password authentication works, why guessing, reuse, credential stuffing, and phishing remain dangerous, and how password managers and additional factors reduce—but do not eliminate—those risks.