@inproceedings{8fbbdf23e43c4ad799a44ad644c99c50,
title = "Exploring Secure Login Alternatives For Online Shopping Platforms",
abstract = "This paper focuses on identifying and analyzing the current login risks for online shopping platforms. To have a comprehensive understanding of the current risks, the paper analyzed cybersecurity research reports of 2024 to identify the challenges, which are brute-force attacks and phishing attacks. Then presented a comprehensive review of the current login methods used and discussed their weaknesses and strengths. The paper explores the alternative login methods that address the current challenges while also taking into consideration the user experience; it has to be a method that is user-friendly, easy, and accessible to all target users. The paper proposed the following alternatives: the authentication applications such as Microsoft Authenticator and NAFAD, and the passwordless authentication method. Lastly, the paper did not provide any testing; therefore, the recommendations for future research directions are to conduct a test with the popular online shopping platforms to measure the effectiveness of the alternative methods proposed. Another recommendation is deploying a machine learning model to analyze the system's behavior to notify the developer whenever the login method is no longer secure and testing the effectiveness of deploying hardware-based token authentication methods for the online shopping platforms.",
keywords = "authentication, cybersecurity, online shopping, Secure login, user privacy, vulnerabilities",
author = "Tasneem Annahdi and Saqib, \{Nazar Abbas\}",
note = "Publisher Copyright: {\textcopyright} 2025 IEEE.; 3rd International Conference on Cyber Resilience, ICCR 2025 ; Conference date: 03-07-2025 Through 04-07-2025",
year = "2025",
doi = "10.1109/ICCR67387.2025.11292524",
language = "English",
series = "ICCR 2025 - 3rd International Conference on Cyber Resilience",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
booktitle = "ICCR 2025 - 3rd International Conference on Cyber Resilience",
}