How to Prevent the use of Weak Passwords

Highland, Harold Joseph

doi:10.1080/07366989109451232

Cited by 4 publications

(9 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although long, random, arbitrary passwords are difficult for others to guess, users generally cannot remember them. Thus, most users will take the road of least resistance and resort to the minimum number of characters acceptable by their system and use meaningful details, such as their name, nickname, initials, or birth date [27,28,39).…”

Section: Evolution Of Passwordsmentioning

confidence: 99%

“…Password characteristics under investigation are length (number of characters in a password), composition (character domain: alphabetic, numeric, alphanumeric, or the entire ASCII character set), lifetime (frequency of changing passwords), and password selection method. Selection method means whether a password is based on a personally meaningful detail (user's last name, first name, nickname, child's name, or some other easily recalled bit of personal, biographical information), a combination of meaningful details (BILL89 or LOVEMARY), a pronounceable string of characters (2BFREE), string of random characters (H*DGFH8H), or some other basis [2,14,20,28,29,34,60,64].…”

Section: Key Issues and Exploration Hypothesesmentioning

confidence: 99%

“…PASSWORD SECURITY 167 The next set of hypotheses investigates possible relationships between password characteristics and their memorizability and the tendency to write down passwords. It has been suggested that password characteristics affect memorizability [2,3,28,45,46]. It follows that, if a password is difficult to remember, it will be written down [3,27,28,64].…”

Section: Key Issues and Exploration Hypothesesmentioning

confidence: 99%

“…Selection method means whether a password is based on (a) a personally meaningful detail, such as user's last name, first name, nickname, child's name, (b) a combination of meaningful details (BILL89 or LOVEMARY), (c) a pronounceable string of characters (2BFREE), (d) a string of random characters (H*DGFH8H), or (e) some other basis that the respondent was asked to specify [2,20,28,34,60].…”

Section: H5: the Difficulty Of Remembering A Password Or Writing It Dmentioning

confidence: 99%

“…In testing the first hypothesis, we followed Hoffman [3 I] and Highland [28,29] in assuming that data rated as sensitive or important would be surrounded with more security than data not so rated. For the sake of presentation, HI was broken down into …”

Section: Relationship Between Data Attributes and Password Characterimentioning

confidence: 99%

See 4 more Smart Citations

Password Security: An Empirical Study

Zviran

Haga

1999

Journal of Management Information Systems

181

125

View full text Add to dashboard Cite

Organizations are more dependent than ever on the reliable operation of their information systems, which have become a key to their success and effectiveness. While the growing dependence on information systems creates an urgent need to collect information and make it accessible, the proliferation of computer technology has also spawned opportunities for ill-intentioned individuals to violate the information systems' integrity and validity.One of the most common control mechanisms for authenticating users of computerized information systems is the use of passwords. However, despite the widespread use of passwords, little attention has been given to the characteristics of their actual use. This paper addresses the gap in evaluating the characteristics of real-life passwords and presents the results of an empirical study on password usage. It investigates the core characteristics of user-generated passwords and associations among those characteristics.

show abstract

Section: Evolution Of Passwordsmentioning

confidence: 99%

Section: Key Issues and Exploration Hypothesesmentioning

confidence: 99%

Section: Key Issues and Exploration Hypothesesmentioning

confidence: 99%

Section: H5: the Difficulty Of Remembering A Password Or Writing It Dmentioning

confidence: 99%

Section: Relationship Between Data Attributes and Password Characterimentioning

confidence: 99%

See 3 more Smart Citations

Password Security: An Empirical Study

Zviran

Haga

1999

Journal of Management Information Systems

181

125

View full text Add to dashboard Cite

show abstract

USA — A status report — Part II

Bigelow¹

1992

Computer Law & Security Review

View full text Add to dashboard Cite

Using and managing multiple passwords: A week to a view

Grawemeyer¹,

Johnson²

2011

Interacting with Computers

View full text Add to dashboard Cite

a b s t r a c tSecurity policies are required that protect information from unauthorised access, and also respect challenges users face in creating, and particularly managing, increasing numbers of passwords. This paper investigates real password use in the context of daily life. It presents the results of an empirical study where participants completed a password diary over 7 days, followed by debrief interviews to gain further knowledge and understanding of user behaviour. The results reported relate to how many passwords are in use, the types of passwords participants created, the relationships between different passwords and to sensitive services, how participants retrieved their passwords and finally, the different strategies adopted by users in their management of passwords. The paper concludes by providing a high level set of password guidelines, along with suggestions for mechanisms to support creating, encoding, retrieving and executing multiple passwords.

show abstract

How to Prevent the use of Weak Passwords

Cited by 4 publications

References 0 publications

Password Security: An Empirical Study

Password Security: An Empirical Study

USA — A status report — Part II

Using and managing multiple passwords: A week to a view

Contact Info

Product

Resources

About