Question-and-answer passwords: An empirical evaluation (1991)

by W J Haga, M Zviran
Venue:Information Systems