Who Are You?! Adventures in Authentication Workshop (WAY)


WAY will be held in the Bayshore Room of the Hyatt Regency Santa Clara. (Just go upstairs, and then head to the right and lookout for the WAY sign.)

Note: WAY 2019 is co-located with the Symposium on Usable Privacy and Security (SOUPS).


Get involved, meet your peers, discuss important issues: Join our Slack.

Schedule (at a Glance)

Time Program
08:00 am – 05:00 pm On-site Registration and Badge Pickup
08:00 am – 09:00 am Continental Breakfast
09:00 am – 09:10 am Opening Remarks
09:10 am – 10:30 am Paper Session I (4 presentations)
10:30 am – 11:00 am Coffee Break
11:00 am – 12:00 pm Industry Panel: Challenges in Authentication
12:00 pm – 01:45 pm Lunch (on your own)
01:45 pm – 03:05 pm Paper Session II (4 presentations)
03:05 pm – 03:35 pm Coffee Break
03:35 pm – 04:15 pm Paper Session III (2 presentations)
04:15 pm – 05:05 pm Speed Networking: Let's Collaborate!
05:05 pm – 05:25 pm Feedback Round: The Future of WAY
05:25 pm – 05:30 pm Closing Remarks
06:00 pm – 07:00 pm SOUPS 2019 Poster Session (free for WAY participants)

Detailed Schedule

Paper Session I – (09:10 am – 10:30 am)

Time Program
09:10 am – 09:30 am A Key to Your Heart: Biometric Authentication Based on ECG Signals
09:30 am – 09:50 am Keyboard Based Password Generation Strategies
09:50 am – 10:10 am Quantum Authentication: Current and Future Research Directions
10:10 am – 10:30 am DALock: Password Distribution Aware Throttling

Industry Panel: Challenges in Authentication – (11:00 am – 12:00 pm)

Carbonite, Inc.

Countermeasures Against Credential Stuffing Attacks

About Daniel: Dan serves as Chief Security Architect at Carbonite, protecting personal and business data onsite and in the cloud. Over a career including 10 years at RSA, Dan has designed and built solutions used by millions of people in billions of artifacts. He holds more than 50 patents and has published on real-world implementation in CRYPTO, Journal of Cryptology, Cryptographic Hardware and Embedded Systems, and others.

Daniel V. Bailey
All In Bits, Inc.

Authentication Challenges in the Blockchain World

About Jessy: Jessy Irwin is Head of Security at Tendermint, where she excels at translating complex cybersecurity problems into relatable terms. She is responsible for developing, maintaining and delivering comprehensive security strategies that support and enable the needs of her organization and its people. She regularly writes and presents about human-centered security, and believes that people should not have to become experts in technology, security or privacy to be safe online.

Jessy Irwin
AgileBits, Inc.

Verifying User Access Rights on an Encryption-Based System

Pilar Garcia - Security Analyst

About Pilar: Pilar Garcia completed her Bachelors in Physics at the Universidad de las Américas Puebla (Mexico), and received her Masters in Pure and Applied Logic from the University of Barcelona. Now based in Toronto, Canada, Pilar is a Security Analyst for the award-winning password management app, 1Password.

Jessy Irwin

Paper Session II – (01:45 pm – 03:05 pm)

Time Program
01:45 pm – 02:05 pm View The Email to Get Hacked: Attacking SMS-Based Two-Factor Authentication
02:05 pm – 02:25 pm Taken Out of Context: Security Risks with Security Code AutoFill in iOS & macOS
02:25 pm – 02:45 pm Evaluating the Android Security Key Scheme: An Early Usability, Deployability, Security Evaluation with Comparative Analysis
02:45 pm – 03:05 pm Towards Implementing Inclusive Authentication Technologies for Older Adults

Paper Session III – (03:35 pm – 04:15 pm)

Time Program
03:35 pm – 03:55 pm An Empirical Study of Mnemonic Password Recall Errors
03:55 pm – 04:15 pm Let's Authenticate: Automated Cryptographic Authentication for the Web with Simple Account Recovery

Speed Networking: Let's Collaborate! – (04:15 pm – 05:05 pm)

Meet your fellow workshoppers! This speed networking session will allow you to meet other WAY participants who share your interest in authentication via short meet-and-greet style "meetings." Participation is optional but encouraged.

Feedback Round: The Future of WAY – (05:05 pm – 05:25 pm)

We want to hear your opinion: What needs to change? Should we continue the 'WAY' it is? (pun intended) How can we attract more people?