MFA是浪费时间！通过用户生成内容理解对MFA应用的负面含义
MFA is a Waste of Time! Understanding Negative Connotation Towards MFA Applications via User Generated Content
摘要：
传统的单因素身份认证由于单点失效的特性而存在严重的安全漏洞。多因素身份验证（MFA）旨在通过提供额外的验证步骤来增强安全性。然而，在实际部署中，用户在使用MFA时往往会感到不满，从而导致不采用。为了了解MFA当前的设计和可用性问题，我们分析了来自主要分销商（如Amazon、Google Play、Apple App Store等）的关于基于应用程序的MFA工具的汇总用户评论（N = 12，500）。虽然一些用户承认MFA的安全优势，但他们中的大多数人仍然面临初始配置，系统设计理解，有限的设备兼容性和风险权衡等问题，导致不采用MFA。基于这些结果，我们在技术设计、初始培训和风险沟通方面提供了可操作的建议，以提高MFA的采用率和用户体验。
英文摘要：
Traditional single-factor authentication possesses several critical security vulnerabilities due to single-point failure feature. Multi-factor authentication (MFA), intends to enhance security by providing additional verification steps. However, in practical deployment, users often experience dissatisfaction while using MFA, which leads to non-adoption. In order to understand the current design and usability issues with MFA, we analyze aggregated user generated comments (N = 12,500) about application-based MFA tools from major distributors, such as, Amazon, Google Play, Apple App Store, and others. While some users acknowledge the security benefits of MFA, majority of them still faced problems with initial configuration, system design understanding, limited device compatibility, and risk trade-offs leading to non-adoption of MFA. Based on these results, we provide actionable recommendations in technological design, initial training, and risk communication to improve the adoption and user experience of MFA.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
