DISSERTATION · University of Hertfordshire Research Archive (University of Hertfordshire) · 2017

Security and Usability of Authentication by Challenge Questions in Online Examination

Abrar Ullah

Read original paper ↗

See where this research leads.

A citation map has not been saved for this paper yet.

Open in your workspace →Open your workspace to prepare the citation network.

The paper record is available below. Preparing a network uses the existing account and source-allowance controls.

Papers that cite this work

No saved citation network is available; this does not mean the paper has no citations.

The evidence behind the map

Publication record

Dissertation.

Abstract

Online examinations are an integral component of many online learning environments and a high-stake process for students, teachers and educational institutions. They are the target of many security threats, including intrusion by hackers and collusion. Collu-sion happens when a student invites a third party to impersonate him/her in an online test, or to abet with the exam questions. This research proposed a profile-based chal-lenge question approach to create and consolidate a student’s profile during the learning process, to be used for authentication in the examination process. The pro-posed method was investigated in six research studies using a usability test method and a risk-based security assessment method, in order to investigate usability attributes and security threats. The findings of the studies revealed that text-based questions are prone to usability issues such as ambiguity, syntactic variation, and spelling mistakes. The results of a usability analysis suggested that image-based questions are more usable than text-based questions (p < 0.01). The findings identified that dynamic profile questions are more efficient and effective than text-based and image-based questions (p < 0.01). Since text-based questions are associated with an individual’s personal information, they are prone to being shared with impersonators. An increase in the numbers of chal-lenge questions being shared showed a significant linear trend (p < 0.01) and increased the success of an impersonation attack. An increase in the database size decreased the success of an impersonation attack with a significant linear trend (p < 0.01). The security analysis of dynamic profile questions revealed that an impersonation attack was not successful when a student shared credentials using email asynchronously. However, a similar attack was successful when a student and impersonator shared information in real time using mobile phones. The response time in this attack was significantly different when a genuine student responded to his challenge questions (p < 0.01). The security analysis revealed that the use of dynamic profile questions in a proctored exam can influence impersonation and abetting. This view was supported by online programme tutors in a focus group study.

Coverage and freshness

Citation coverage has not been established for this paper.

Counts describe saved source records; repository versions may appear separately. A completed source query is not a complete or live citation census. A citation does not prove endorsement or research quality. Counts depend on publication age and index coverage. Colors identify research areas; positions are for readability.

Source: Saved OpenAlex scholarly metadata. Visits to this public page do not acquire new provider data.

Report a correction