ADAPTIVE MULTI-FACTOR AUTHENTICATION SYSTEM FOR SECURE CLOUD APPLICATIONS BASED ON USER RISK LEVEL

Nowadays, most of our daily activities like banking, shopping, and communication happen
online. Because of this, protecting user accounts has become very important. Many systems still depend
only on passwords or fixed multi-factor authentication, which are not always secure and sometimes make
the login process difficult for users. So, the attackers can easily access it without the user knowledge. In
this project, we propose an Adaptive Multi-Factor Authentication system that works based on the risk
level of each login attempt. Instead of asking the same verification every time, the system checks details
like user location, device, and IP address and the behaviour of the user. Based on this, it decides whether
to allow access directly or ask for extra verification such as OTP, email verification. We have created a
web application by testing the real time actions. From the results, it is clear that this approach improves
both security and user experience in a better way and different from compared to traditional methods.