Personalized Password Guessing: A New Security Threat
Title | Personalized Password Guessing: A New Security Threat |
Publication Type | Conference Paper |
Year of Publication | 2014 |
Authors | Cao, Phuong, Li, Hongyang, Nahrstedt, Klara, Kalbarczyk, Zbigniew, Iyer, Ravishankar, Slagell, Adam J. |
Conference Name | Proceedings of the 2014 Symposium and Bootcamp on the Science of Security |
Publisher | ACM |
Conference Location | Raleigh, NC, USA |
ISBN Number | 978-1-4503-2907-1 |
Keywords | ACM CCS, cyber security, Data Driven Security Models and Analysis, Foundations, graphical model, guessing, Human and Societal Aspects of Security and Privacy, Modeling, password, personalized, science of security, suggestion |
Abstract | This paper presents a model for generating personalized passwords (i.e., passwords based on user and service profile). A user's password is generated from a list of personalized words, each word is drawn from a topic relating to a user and the service in use. The proposed model can be applied to: (i) assess the strength of a password (i.e., determine how many guesses are used to crack the password), and (ii) generate secure (i.e., contains digits, special characters, or capitalized characters) yet easy to memorize passwords. |
URL | http://doi.acm.org/10.1145/2600176.2600198 |
DOI | 10.1145/2600176.2600198 |
Citation Key | Cao:2014:PPG:2600176.2600198 |
- Modeling
- Science of Security
- Foundations
- ACM CCS
- cyber security
- foundations
- Graphical Model
- guessing
- Human and Societal Aspects of Security and Privacy
- modeling
- password
- personalized
- Science of Security
- suggestion
- ACM CCS
- Cyber Security
- Human and Societal Aspects of Security and Privacy
- Data Driven Security Models and Analysis