Elastic password: A new mechanism for strengthening passwords using time delays between keystrokes

Mahmoud, Khaled W.

doi:10.1109/iacs.2017.7921991

Cited by 3 publications

(3 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Any accidental waiting time during typing password will be considered as a large delay and will lead to reject the login if this delay is in the wrong position. For more details refer to [7]. It should be clear that this approach of password hardening is different from password hardening based on keystroke dynamics.…”

Section: Hardening Passwords By Adding Delays Between Keystrokesmentioning

confidence: 99%

“…To extract the delay pattern from the collected delaylist, a detailed algorithm is given in [7]. It sorts the list of delays in an ascending order a long with the original position of each delay value.…”

Section: Algorithmmentioning

confidence: 99%

“…This helps companies to deny any access from adversary who is trying to impersonate users and access the system as a legitimate user. The proposed mechanisms are built on the password hardening technique that was presented in [6] and [7]. This password hardening technique depends mainly on the way users perform the sign-up step.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Detecting Password File Theft using Predeﬁned Time-Delays between Certain Password Characters

Mahmoud¹,

Mansour²,

Makableh³

2017

JTIT

Self Cite

View full text Add to dashboard Cite

Abstract-This paper presents novel mechanisms that effectively detect password file thefts and at the same time prevent uncovering passwords. The proposed mechanism uses delay between consecutive keystrokes of the password characters. In presented case, a user should not only enter his password correctly during the sign-up process, but also needs to introduce relatively large time gaps between certain password characters. The proposed novel approaches disguise stored passwords by adding a suffix value that helps in detecting password file theft at the first sign-in attempt by an adversary who steals and cracks the hashed password file. Any attempt to login using a real password without adding the time delays in the correct positions may considered as an impersonation attack, i.e. the password file has been stolen and cracked.

show abstract

Section: Hardening Passwords By Adding Delays Between Keystrokesmentioning

confidence: 99%

Section: Algorithmmentioning

confidence: 99%

See 1 more Smart Citation

Detecting Password File Theft using Predeﬁned Time-Delays between Certain Password Characters

Mahmoud¹,

Mansour²,

Makableh³

2017

JTIT

Self Cite

View full text Add to dashboard Cite

show abstract

CombinedPWD: A New Password Authentication Mechanism Using Separators Between Keystrokes

Zheng

Jia

2017

2017 13th International Conference on Computational Intelligence and Security (CIS)

View full text Add to dashboard Cite

A New Approach for Textual Password Hardening Using Keystroke Latency Times

Mansour¹,

Mahmoud²

2021

IAJIT

View full text Add to dashboard Cite

Textual passwords are still widely used as an authentication mechanism. This paper addresses the problem of textual password hardening and proposes a mechanism to make textual passwords harder to be used by unauthorized persons. The mechanismintroduces time gaps between keystrokes (latency times) that would add a second protection line to the password. Latency times are converted into discrete representation (symbols) where the sequence of these symbols is added to the password. For accessing system, an authorized person needs to type his/her password with a certain rhythm. This rhythm is recorded at the sign-up time.This work is an extension to a previous work that elaborates more on the local approach of discretizing time gaps between every two consecutive keystrokes. In addition, more experimental settings and results are provided and analyzed. The local approach considers the keying pattern of each user to discretize latency times. The average, median and min-max are tested thoroughly.Two experimental settings are considered here: laboratory and real-world. The lab setting includes students studying information technology while the other group are not. On the other hand, information technology professional individuals participated in the real-world experiment. The results recommend using the local threshold approach over the global one. In addition, the average method performs better than the other methods. Finally, the experimental results of the real-world setting support using the proposed password hardening mechanism.

show abstract

Elastic password: A new mechanism for strengthening passwords using time delays between keystrokes

Cited by 3 publications

References 12 publications

Detecting Password File Theft using Predeﬁned Time-Delays between Certain Password Characters

Detecting Password File Theft using Predeﬁned Time-Delays between Certain Password Characters

CombinedPWD: A New Password Authentication Mechanism Using Separators Between Keystrokes

A New Approach for Textual Password Hardening Using Keystroke Latency Times

Contact Info

Product

Resources

About