@article{kumar2009pairing,
title={A comparative study of secure device pairing methods},
author={Kumar, Arun and Saxena, Nitesh and Tsudik, Gene and Uzun, Ersin},
url={https://www.sciencedirect.com/science/article/pii/S1574119209000650},
urldate={2024-03-26},
howpublished={\url{https://www.sciencedirect.com/science/article/pii/S1574119209000650/pdfft}},
DOI={10.1016/j.pmcj.2009.07.008},
journal={Pervasive and Mobile Computing},
volume={5},
number={6},
pages={734--749},
year={2009},
month={12},
publisher={Elsevier},
abstract={"Secure Device Pairing" or "Secure First Connect" is the process of bootstrapping a secure channel between two previously unassociated devices over some (usually wireless) human-imperceptible communication channel. Absence of prior security context and common trust infrastructure open the door for the so-called Man-in-the-Middle and Evil Twin attacks. Mitigation of these attacks requires some level of user involvement in the device pairing process. Prior research yielded a number of technically sound methods relying on various auxiliary human-perceptible out-of-band channels, e.g., visual, acoustic and tactile. Such methods engage the user in authenticating information exchanged over the human-imperceptible channel, thus defending against MiTM attacks and forming the basis for secure pairing.  This paper reports on a comprehensive and comparative evaluation of notable secure device pairing methods. This evaluation was obtained via a thorough analysis of these methods, in terms of both security and usability. The results help us identify methods best-suited for specific combinations of devices and human abilities. This work is an important step in understanding usability in one of the rare settings where a very wide range of users (not just specialists) are confronted with modern security technology.},
}