- Security question
A security question is used as an
authenticator bybank s,cable companies andwireless provider s as an extrasecurity layer. They are a form ofshared secret .cite web
url=http://www.slate.com/id/2183030/pagenum/all/
title=In What City Did You Honeymoon? And other monstrously stupid bank security questions
first=Josh
last=Levin
publisher=Slate
date=2008-01-30]Financial institutions have used questions to authenticate customers since at least the 1980s. For example, a
credit card provider could request a customer'smother 'smaiden name before issuing a replacement for a lost card.However, beginning in mid-2006, the questions have become ubiquitous
online . As a form ofself-service password reset , security questions have reducedinformation technology help desk costs.Seventy to eighty percent of American banks use
RSA Security 's "Adaptive Authentication program," includingBank of America ,Wachovia , ING,Washington Mutual , and Vanguard. RSA estimates that ninety percent of banks are using security questions.The best answers are simple, memorable, can't be guessed easily, and don't change over time. [cite web
url=http://www.goodsecurityquestions.com/designing.htm
title=Designing Good Security Questions
author=Garry
accessdate=2008-01-30] Understanding that not every question will work for everyone, RSA gives banks 150 questions to choose from.ee also
*
Password chaos References
External links
* [http://www.rsa.com/node.aspx?id=3018 RSA's Adaptive Authentication program]
* [http://www.goodsecurityquestions.com/ goodsecurityquestions.com]
Wikimedia Foundation. 2010.