FIDO Research Methods & Evidence-Based Practice 2

Question 1

When designing a usability study for a FIDO2 authenticator, which control technique best isolates the effect of the authenticator design from user familiarity?

Accepted Answer

Within-subjects counterbalanced design

Answer

A within-subjects counterbalanced design controls for individual differences and order effects, isolating the authenticator variable.

Question 2

A researcher compares phishing resistance of FIDO keys versus OTP tokens across 300 participants. The p-value is 0.03. What does this indicate?

Accepted Answer

There is a statistically significant difference at the 0.05 level

Answer

A p-value of 0.03 falls below the conventional 0.05 threshold, indicating the result is statistically significant.

Question 3

Which type of evidence is considered highest on the evidence hierarchy when evaluating FIDO authenticator security claims?

Accepted Answer

Systematic review and meta-analysis of controlled trials

Answer

Systematic reviews and meta-analyses synthesize multiple controlled studies and sit at the top of the evidence hierarchy.

Question 4

In a FIDO authenticator threat modeling study, what does 'attack surface reduction' as an evidence-based goal primarily involve?

Accepted Answer

Minimizing the number of exploitable interfaces and entry points

Answer

Attack surface reduction focuses on eliminating or hardening exploitable interfaces to lower the probability of successful attacks.

Question 5

A study measures false acceptance rate (FAR) and false rejection rate (FRR) for a biometric FIDO authenticator. Which metric best represents the tradeoff between security and usability?

Accepted Answer

Equal Error Rate (EER)

Answer

The Equal Error Rate (EER) is the point where FAR equals FRR, representing the optimal tradeoff between security and usability.

(FIDO) FIDO Certified Authenticator Practice Test

(FIDO) FIDO Certified Authenticator Practice Test

FIDO Research Methods & Evidence-Based Practice 2