main.tex

%----------------------------------------------------------------------------------------
%	PAPER SETUP
%----------------------------------------------------------------------------------------

\newcommand*{\mytitle}{Beyond Passwords? About the current state of FIDO2 authentication} % Paper Title
\newcommand*{\myauthor}{Nils Höll} % Paper Author
\newcommand*{\mydate}{May 2020} % Publication Date
\newcommand*{\myuni}{\href{https://www.uni-due.de}{University of Duisburg-Essen}} % University
\newcommand*{\myfac}{\href{https://www.wiwi.uni-due.de}{Faculty of Business Administration and Economics}} % Faculty
\newcommand*{\myorg}{ACWE} % Organization, Journal, Subject this paper was published in
\newcommand*{\mysup}{J. Peter M. Schuler} % Supervisor


%----------------------------------------------------------------------------------------
%	PACKAGES AND OTHER DOCUMENT CONFIGURATIONS
%----------------------------------------------------------------------------------------

\documentclass[twoside,twocolumn]{article}

\usepackage{blindtext} % Package to generate dummy text throughout this template 

% ------- FONTS -------
\usepackage[sc]{mathpazo} % Use the Palatino font
\usepackage[T1]{fontenc} % Use 8-bit encoding that has 256 glyphs
\usepackage[utf8]{inputenc}

\usepackage[official]{eurosym}
\DeclareUnicodeCharacter{20AC}{\euro{}}

\linespread{1.05} % Line spacing - Palatino needs more space between lines
\usepackage{microtype} % Slightly tweak font spacing for aesthetics

\usepackage[english]{babel} % Language hyphenation and typographical rules

% ------- DOCUMENT MARGINS -------
\usepackage[hmarginratio=1:1,top=32mm,columnsep=20pt]{geometry} % Document margins
\usepackage[hang, small,labelfont=bf,up,textfont=it,up]{caption} % Custom captions under/above floats in tables or figures
\usepackage{booktabs} % Horizontal rules in tables

\usepackage{graphicx}
% \usepackage[section]{placeins} % Floats are always placed in the right section
\usepackage{lettrine} % The lettrine is the first enlarged letter at the beginning of the text

% ------- LISTS -------
\usepackage{enumitem} % Customized lists
\setlist[itemize]{noitemsep} % Make itemize lists more compact

% ------- ABSTRACT -------
\usepackage{abstract} % Allows abstract customization
\renewcommand{\abstractnamefont}{\normalfont\bfseries} % Set the "Abstract" text to bold
\renewcommand{\abstracttextfont}{\normalfont\small\itshape} % Set the abstract itself to small italic text

% ------- SECTION TITLES -------
\usepackage{titlesec} % Allows customization of titles
\renewcommand\thesection{\Roman{section}} % Roman numerals for the sections
\renewcommand\thesubsection{\roman{subsection}} % roman numerals for subsections
\titleformat{\section}[block]{\large\scshape\centering}{\thesection.}{1em}{} % Change the look of the section titles
\titleformat{\subsection}[block]{\large}{\thesubsection.}{1em}{} % Change the look of the section titles

% ------- HEADERS AND FOOTERS -------
\usepackage{fancyhdr} % Headers and footers
\pagestyle{fancy} % All pages have headers and footers
\fancyhead{} % Blank out the default header
\fancyfoot{} % Blank out the default footer
\fancyhead[C]{\mytitle\, $\bullet$ \mydate\, $\bullet$ \myorg} % Custom header text
\fancyfoot[RO,LE]{\thepage} % Custom footer text

\usepackage{titling} % Customizing the title section

% ------- HYPERREF -------
\usepackage{hyperref} % For hyperlinks in the PDF
\AtBeginDocument{
  \hypersetup{pdftitle={\mytitle}} % Set the PDF's title to your title
  \hypersetup{pdfauthor={\myauthor}} % Set the PDF's author to your name
  \hypersetup{hidelinks} % Prints all links black; comment out for default LaTeX behavior
}

% ------- BIBTEX -------
\usepackage[backend=bibtex,style=numeric,citestyle=numeric,natbib=true]{biblatex}
\addbibresource{sources.bib}

\usepackage[autostyle=true]{csquotes}

% ------- COLORS -------
% Define colors for highlighting
\usepackage{xcolor}
\definecolor{lstbg}{gray}{0.95}
\definecolor{lstComment}{RGB}{51, 102, 0}
\definecolor{lstKey}{RGB}{0, 51, 204}
\definecolor{lstStr}{RGB}{162, 43, 43}

% ------- ACRONYMS -------
% \usepackage[nohyperlinks]{acronym} % Prints only used acronyms in overview
\usepackage[nohyperlinks, printonlyused]{acronym} % Prints only used acronyms in overview

% Better highlighting for inline code
\newcommand{\linecode}[1]{%
  \colorbox{lstbg}{\textcolor{lstStr}{\textbf{\texttt{#1}}}}%
}

%----------------------------------------------------------------------------------------
%	TITLE SECTION
%----------------------------------------------------------------------------------------

\setlength{\droptitle}{-2\baselineskip} % Move the title up

\pretitle{%
  \begin{center}
    \Large\myuni\\
    \large\myfac\\
    \vspace{0.5cm}
    \Huge\bfseries
    } % Article title formatting
\posttitle{\vspace{1.5cm}\end{center}} % Article title closing formatting
\title{\mytitle} % Article title
\author{%
  \textsc{\myauthor} \\[1ex] % Name
  \normalsize 3087271 \\ % MatriculationNo
  \normalsize \href{mailto:nils.siegle@stud.uni-due.de}{nils.siegle@stud.uni-due.de} \\[2ex]
  \normalsize \emph{Supervisor:} \mysup \\
  [5ex]
  \mydate
}
\date{} % Leave empty to omit a date
\renewcommand{\maketitlehookd}{%

%------------------------------------------------
%	ABSTRACT
%------------------------------------------------

\begin{abstract}
\noindent Passwords are insecure and annoying to use, especially if one tries to use them in a secure way. We know the problems regarding this form of authentication, there are dozens of studies and articles about why passwords should not be used anymore, how they can be made more secure, and why people still reuse already weak credentials despite better knowledge \cite{bailey2014,elhai2016,hunt2018c,whitty2015,mcmillan2012}.\\
Those findings and their conclusions - that we need better forms of authentication for web applications - are supported by the almost regular credential leaks from companies in all branches, collected by sites like Have I Been Pwned or the Hasso-Plattner-Institut Identity Leak Checker.\\
One of the many proposals on how to tackle this problem comes from the \ac{fido} Alliance. Their new authentication framework, \ac{fido2}, promises an open standard for secure and easy to use web authentication.\\
\\
This paper analyzes the current body of knowledge regarding the security and usability of \ac{fido2} and tries to draw a conclusion whether or not it could replace legacy passwords in the future.
\end{abstract}
}

%----------------------------------------------------------------------------------------

\begin{document}

% Print the title
\maketitle

\newpage
\onecolumn
%------------------------------------------------
%	ToC
%------------------------------------------------
\tableofcontents
\newpage

%------------------------------------------------
%	ACRONYMS
%------------------------------------------------

\section*{Abbreviations}
\begin{acronym}[AAAAAAA]
  \acro{1fa}[1FA]{Single-Factor Authentication}
  \acro{2fa}[2FA]{Two-Factor Authentication}
  \acro{authn}[authn]{Authentication}
  \acro{authz}[authz]{Authorization}
  \acro{api}[API]{Application Programming Interface}
  \acro{ctap}[CTAP]{Client to Authenticator Protocol}
  \acro{ctap2}[CTAP2]{Client to Authenticator Protocol 2}
  \acro{fido}[FIDO]{Fast IDentity Online}
  \acro{fido2}[FIDO2]{Fast IDentity Online 2}
  \acro{hotp}[HOTP]{HMAC-based One-time Password}
  \acro{http}[HTTP]{Hypertext Transport Protocol}
  \acro{https}[HTTPS]{Hypertext Transport Protocol Secure}
  \acro{it}[IT]{Information Technology}
  \acro{mfa}[MFA]{Multi-Factor Authentication}
  \acro{nist}[NIST]{National Institute of Standards and Technology}
  \acro{nfc}[NFC]{Near-Field Communication}
  \acro{os}[OS]{Operating System}
  \acro{otp}[OTP]{One-time Password}
  \acro{owasp}[OWASP]{Open Web Application Security Project}
  \acro{pin}[PIN]{Personal Identification Number}
  \acro{rp}[RP]{Relying Party}
  \acro{tpm}[TPM]{Trusted Platform Module}
  \acro{totp}[TOTP]{Time-based One-time Password}
  \acro{u2f}[U2F]{Universal Second Factor}
  \acro{uaf}[UAF]{Universal Authentication Framework}
  \acro{w3c}[W3C]{World Wide Web Consortium}
\end{acronym}

% \newacro{id}[ABRV]{Abbreviation}
% \acro{}[]{}
% Use 
% - \ac{id} for standard behavior
% - \acs{id} for acronym
% - \acl{id} for long version
% - \acp{id} for plural (with 's' at the end)

\newpage
\twocolumn

%----------------------------------------------------------------------------------------
%	ARTICLE CONTENTS
%----------------------------------------------------------------------------------------

% Section 1 - Introduction
\input{Sections/section1.tex}

% Section 2 - Foundations
\input{Sections/section2.tex}

% Section 3 - Methods
\input{Sections/section3.tex}

% Section 4 - Results
\input{Sections/section4.tex}

% Section 5 - Discussion
\input{Sections/section5.tex}

% Section 6 - Conclusion
\input{Sections/section6.tex}

% Single column layout for the rest of the paper
\onecolumn

%----------------------------------------------------------------------------------------
%  BIBLIOGRAPHY
%----------------------------------------------------------------------------------------
\printbibliography[heading=bibintoc]

%------------------------------------------------

% Section 5 - Appendix
% \input{Sections/appendix.tex}

%----------------------------------------------------------------------------------------

\end{document}