Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
YubiKey: Utvärdering av tvåfaktorsautentisering
University West, Department of Engineering Science, Division of Mathematics, Computer and Surveying Engineering.
2019 (Swedish)Independent thesis Basic level (professional degree), 5 credits / 7,5 HE creditsStudent thesisAlternative title
YubiKey : Evaluation of two-factor authentication (English)
Abstract [sv]

YubiKey är en liten autentiseringsmetod i hårdvaruformat, den är designad till att autentisera en användare på olika nätverksbaserade plattformar såsom Google, Dropbox, Facebook och Twitter.

I den första delen av denna rapport beskrivs underliggande teknologi gällande YubiKey, såsom one-time password protokoll (OTP) och Universal 2nd Factor standarden, vidare beskrivs tillvägagångssättet vid testerna för att undersöka hur praktisk samt säker metoden i sig är, man  undersöker även dess användarvänlighet. Dessa tester utfördes på plattformarna Google Account, Facebook, Dropbox samt twitter, samt att YubiKey jämförs med andra metoder i relation till attackerna phishing, malware, lösenordsgissning, man-in-the-middle samt shoulder surfing.

Syftet med jämförelsen var att se vilka hot YubiKey står emot i förhållande till andra aktörer på marknaden, alltså undersöka dess säkerhet. En senare del redovisar testernas resultat, men jämför även YubiKey med andra metoder ute på marknaden samt undersöker dess återställningsprocess vid stöld eller borttappad YubiKey. Dessa tester intygade metodens användarvänlighet samt hur praktisk och enkel metoden är.

Jämförelsen visar klart och tydligt att YubiKey är en väldigt säker metod, som står emot vanligt förekommande hot mot användarsidan. Simuleringen av återställningsprocessen intygar ytterligare dess användarvänlighet och enkla hantering, även vid borttappad eller stulen nyckel.

Abstract [en]

YubiKey is a small hardware method of authentication, designed to authenticate a user on various network-based platforms such as Google, Dropbox, Facebook and Twitter.

In the first part of this paper, the underlying technology of the YubiKey, such as the one-time password protocol (OTP) and the Universal 2nd Factor standard, is further described, as well as the approach of the tests to examine how practical and secure the method itself is, but also examines its ease of use. These tests were performed on the platforms Google Account, Facebook, Dropbox and Twitter platforms. The YubiKey is also compared to other methods in relation to the phishing, malware, password guessing, man-in-the-middle and shoulder surfing attacks.

The purpose of the comparison was to see if YubiKey protects against these attacks, compared to other methods, thus investigating its security. A later part presents the results of the tests, but also compares YubiKey with other methods in the market, and examines the recovery of a stolen och lost Yubikey. These tests show the simplicity of the method, its ease of use and how practical the method is.

The comparison clearly shows that YubiKey is a very safe method, which resists common threats to the user side. The simulation of the recovery process further attests to its ease of use and ease of handling, even with lost or stolen key.

Place, publisher, year, edition, pages
2019. , p. 15
Keywords [en]
Authentication, Security, Hardware, Encryption, YubiKey
Keywords [sv]
Autentisering, Säkerhet, Hårdvara, Kryptering, YubiKey
National Category
Electrical Engineering, Electronic Engineering, Information Engineering
Identifiers
URN: urn:nbn:se:hv:diva-13795Local ID: EXN300OAI: oai:DiVA.org:hv-13795DiVA, id: diva2:1305502
Subject / course
Computer enigeering
Educational program
Nätverksteknik med IT-säkerhet
Supervisors
Examiners
Available from: 2019-04-17 Created: 2019-04-17 Last updated: 2019-04-17Bibliographically approved

Open Access in DiVA

No full text in DiVA

By organisation
Division of Mathematics, Computer and Surveying Engineering
Electrical Engineering, Electronic Engineering, Information Engineering

Search outside of DiVA

GoogleGoogle Scholar

urn-nbn

Altmetric score

urn-nbn
Total: 47 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf