Password Generation and Search Space Reduction

Helkala, Kirsi; Snekkenes, Einar

doi:10.4304/jcp.4.7.663-669

Cited by 9 publications

(3 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore the instructor's help was important when the tool is used the first time. In [5] we have analyzed the information leakage of passwords when the adversary has an access to the questionnaire answers. Based on these computations the tool used in this study was build.…”

Section: B a Tool For Password Quality Checkingmentioning

confidence: 99%

“…And they were told that a password which scores more than 735 is a good password and a password achieving more points than 875 is called a strong password. The score points levels are based findings in [4], [5].…”

Section: B a Tool For Password Quality Checkingmentioning

confidence: 99%

“…For each category different password generation guidelines were taught. Password guidelines are derived from the search space reduction computations and are found in author's study [5].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Password Education Based on Guidelines Tailored to Different Password Categories

Helkala¹

2011

JCP

Self Cite

View full text Add to dashboard Cite

Abstract-General password policies do not guarantee that passwords fulfilling the requirement are good enough. The policies have a tendency to be too broad to be useful for all users. Different users have different designing processes based on what kind of passwords they most easily remember. Users are also often left to generate passwords on their own without any training. In our study we used new password creation guidelines when teaching students password security. We divided passwords into three password categories: Word password, Mixture password and Non-word password. For each category different password generation guidelines were taught to students. Students had access to the password quality measurement tool, which not only measured the strength of the password but also guided students in the generation process. Our goal is to measure the effect of education on the strength of a password and analyze recall rates of the passwords created by the new guidelines. It is shown that education had a positive effect and that passwords became stronger right after the education. The most important result is that a password structure got changed as the variation of structures increased and different structure types were more evenly distributed. However, after half a year without reminders or education repetition, most of the positive effect was lost. While password structures still differed, they had become less complex as participants had given up using special characters. Recall rates of the passwords generated with new guidelines are good.

show abstract

Section: B a Tool For Password Quality Checkingmentioning

confidence: 99%

Section: B a Tool For Password Quality Checkingmentioning

confidence: 99%