2026
Article
Comparing a Store-less Password Manager with Traditional Password-Only Authentication
IEEE Internet Computing
Digital identity security, made clearer and stronger
Mohammed Jubur
I work to make digital identity systems safer, clearer, and easier to use.
I combine cybersecurity research, system analysis, and human-centered thinking to understand how authentication and identity systems fail in real-world use—and how they can be designed to better resist attacks while supporting better security decisions.
Assistant Professor of Computer Science
Jazan University
Peer-Reviewed Cybersecurity Research
Arabic & English
Research Evidence
Selected research contributions.
Peer-reviewed work spanning digital identity, authentication, password security, multi-factor authentication, and human-centered cybersecurity.
2025
Article
Usability and Security Analysis of the Compare-and-Confirm Method in Mobile Push-Based Two-Factor Authentication
IEEE Transactions on Mobile Computing
2025
Article
An In-Depth Analysis of Password Managers and Two-Factor Authentication Tools
ACM Computing Surveys
Areas of Expertise
Security where identity, technology, and people meet.
My work focuses on systems that establish and protect digital identity, especially where strong technical security must also support clear and reliable human decisions.
01
Digital Identity & Authentication
How identity and authentication systems can resist compromise while remaining practical and understandable in real-world environments.
02MFA & Push Authentication
The security, usability, and decision-making challenges behind multi-factor and push-based authentication systems.
03Phishing Resistance & Password Security
Authentication and password-management approaches designed to reduce exposure to phishing, credential theft, and weak or reused secrets.
Knowledge & Research
Latest Articles
Research-led articles on digital identity security, authentication, and human-centered cybersecurity.
Understanding Authentication as a System
Authentication is more than checking a password, code, biometric, or passkey. A secure authentication system must be understood across enrollment, sign-in, user decisions, request context, credential changes, recovery, and the sessions it creates.
Read article
Passwords: The Foundation of Authentication—and Its Security Limits
How password authentication works, why guessing, reuse, credential stuffing, and phishing remain dangerous, and how password managers and additional factors reduce—but do not eliminate—those risks.
Read articleProblems I Work On
Security challenges that appear in real use.
I am particularly interested in what happens when security mechanisms meet real interfaces, real users, and real attackers.
01
Can the user trust this authentication request?
I study how authentication systems can present enough context for people to distinguish legitimate requests from fraudulent or unexpected ones.
02
Can stronger security also be easier to use?
I investigate how security mechanisms can provide strong protection without creating unnecessary friction, confusion, or cognitive burden.
03
Can the system protect users when attention fails?
I explore designs that make systems themselves more resistant to phishing and misuse rather than depending entirely on perfect user vigilance.
Latest Updates
News & Highlights
Recent research, publications, media coverage, and professional highlights.
HIPPO Research Gains International Media Attention
Following the IEEE Spectrum feature, HIPPO attracted broader international attention across prominent technology and science outlets, including Popular Science, Hackaday, ACM TechNews, StudyFinds, EurekAlert!, Texas A&M Stories, ITmedia, and others.
Read more →HIPPO Featured in IEEE Spectrum
IEEE Spectrum featured our HIPPO research in its Journal Watch coverage, highlighting an approach that generates strong, site-specific passwords when needed without storing the resulting passwords locally or remotely.
Read more →Push MFA Security Research Published at AINA 2026
“Hardening Push MFA: A Standards-Based Context Architecture for Number Matching” was published at AINA 2026. The work proposes a context-aware architecture for strengthening number-matching authentication by binding approval decisions to clearer request and relying-party context.
Read more →HIPPO Study Accepted by IEEE Internet Computing
Our study, “Comparing a Store-less Password Manager with Traditional Password-Only Authentication,” was accepted by IEEE Internet Computing. The study evaluates HIPPO with 25 participants and examines usability, perceived security, trust, login experience, and password-update workflows.
Read more →The Mobile Paradox Published at ICNC 2026
“The Mobile Paradox: How Interface Friction Can Improve 2FA Security” was published at the 2026 International Conference on Computing, Networking and Communications (ICNC). The study examines how mobile interaction and interface friction can influence security decisions in push-based 2FA.
Read more →What I Bring
From security evidence to better decisions.
My work connects technical security analysis with real-world system behavior, user experience, and the decisions organizations and individuals must make about digital identity.
Evidence-Driven Security Analysis
I examine attacks, authentication mechanisms, interfaces, and user behavior to identify where risk appears and where security can be improved.
Making Complex Security Understandable
I translate technical research and security problems into clear explanations that can support technical teams, decision-makers, students, and wider audiences.
Connecting Security with User Experience
I look at technical protection and usability as parts of the same security system—because security must work when real people use it.
Let's Work Together
Working on a challenge involving digital identity or authentication?
I welcome conversations with organizations, technical teams, researchers, and professionals working on digital identity, authentication, phishing-resistant systems, password security, and security usability.
I am also open to research collaborations, expert discussions, invited talks, educational initiatives, and projects that connect cybersecurity research with practical challenges.