The Death of Passwords

Academic research over the past five years has produced many exciting results on authentication, thanks to the availability of large password datasets and large behavioral studies using Mechanical Turk. Yet it's unclear if we are any closer to killing passwords. This session will include a talk by Joseph Bonneau contrasting his academic password research with his industry experiences at Yahoo! and Google, arguing that Web authentication at scale consists of different problems than those typically considered in academic research. The discussion will focus on what problems academic research should focus on as authentication systems at large Web providers grow increasingly complex.