It's no secret: measuring the security and reliability of authentication via 'secret' questions.

Stuart E. Schechter, A. J. Bernheim Brush, Serge Egelman

Browse the full SOUPS paper archive.