Password Policies vs. Usability: When Do Users Go "Bananas"?

Dillon, Roberto; Chawla, Shailey; Hristova, Dayana; Göbl, Barbara; Jovicic, Suzana

doi:10.1109/trustcom50675.2020.00032

Cited by 3 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The traditional text-based password has been the most common authentication method for the past two decades [22]. It has several usability characteristics, such as ease of use and low cost to establish [23]. The password's strength depends on its complexity, length, and unpredictability against a guessing attack [24].…”

Section: A Textual Passwords 1) Text-based Passwordsmentioning

confidence: 99%

Usability and Security of Knowledge-based Authentication Systems: A State-of-the-Art Review

Wasfi¹,

Stone²

2023

IJACSA

View full text Add to dashboard Cite

Knowledge-based passwords are still the most dominant authentication method for securing digital platforms and services, in spite of the emergence of alternative systems such as token-based and biometric systems. This method has remained the most popular one mostly because of its usability, compatibility, affordability of implementation, and user familiarity. However, the main challenge of knowledge-based password schemes lies in creating passwords that provide a balance between memorability and security. This research aimed to compare various knowledgebased schemes in order to establish a strategy that provided high memorability and resilience to most cyberattacks. The overview of this research identifies areas of knowledge-based passwords for further research and enhances the methodology that helps to offer insight into usable, secure, and sustainable authentication approaches. Future work has been recommended to explore the major features and drawbacks of recognition-based textual passwords because this method provides the usability and security benefits of graphical passwords with the familiarity of textual passwords.

show abstract

Section: A Textual Passwords 1) Text-based Passwordsmentioning

confidence: 99%

Usability and Security of Knowledge-based Authentication Systems: A State-of-the-Art Review

Wasfi¹,

Stone²

2023

IJACSA

View full text Add to dashboard Cite

show abstract

“…Za ta namen smo določili ustrezno politiko izbiranja gesel tako pri besedilnih kot tudi pri geslih GCPS. Pri določanju le-te smo izhajali iz politike besedilnih gesel, ki je najbolj pogosta v literaturi [11]. Za to politiko smo izračunali ustrezno teoretično entropijo oz.…”

Section: Pravila Pri Ustvarjanju Geselunclassified

Primerjava varnosti in pomnjenja gesel: Ugotavljanje uporabnosti tradicionalne metode in metode igrifikacije

Bošnjak

Taneski

2022

View full text Add to dashboard Cite

Besedilna gesla so dandanes še vedno najbolj pogost mehanizem avtentikacije, predvsem zaradi enostavne uporabe in implementacije, ter lažje pomljivosti. Kljub številnim prednostim pa so s postopnim povečanjem procesorske moči računalnikov postala dovzetna za številne napade, zaradi česar se je pojavila potreba po daljših, bolj varnih, ter težje zapomljivih geslih. Posledično so bile raziskane številne alternativne shemeavtentikacije, med drugim tudi grafična gesla. Študija, ki so jo leta 2017 izvedli McLennan in sodelavci, je predstavila novo shemo grafične avtentikacije, imenovano Game Changer Password System (GCPS), v sklopu katere so znaki gesla predstavljeni s položaji igralnih figuric. č eprav avtorji ocenjujejo uporabnost sheme kot obetavno, rezultati študije ne dosegajo zadostne stopnje veljavnosti, saj ne upoštevajo zahtevane varnosti gesel. Poleg tega so avtorji ugotovili, da je potrebno rezultate primerjati tudi s tradicionalnimi gesli. V tej raziskavi smo preučili pomljivost in čas vnosa besedilnih in GCPS gesel, ter rezultate med obema metodama statistično primerjali. Pokazali smo, da so besedilna gesla boljša tako glede pomljivosti, kot tudi hitrosti vnašanja, kar opravičuje njihovo uveljavljenost kot osnovni mehanizem avtentikacije.

show abstract

“…Humans tend to create an easy password containing their personal information, which is easy to be cracked [4,5]. The users' behaviors of password creation enforce companies to establish password policies to increase security [6,7,8]. However, creating different passwords with different policies would be difficult to memorize [9,10].…”

Section: Introductionmentioning

confidence: 99%

The Effectiveness of Applying Different Strategies on Recognition and Recall Textual Password

Wasfi¹,

Stone²

2022

IJNSA

View full text Add to dashboard Cite

Using English words as passwords have been a popular topic in the last few years. The following article discusses a study to compare self-selection of the system-generated words for recognition and selfgenerated words for recall for nouns and mixture words. The results revealed no significant difference between recognition and recall of password nouns. The average memorability rate of noun recognition was 75.72%, slightly higher than noun recall 74.23% in long-term memory. Also, there was no significant difference between recognition and recall mixture word passwords. The average memorability rate of mixture word recognition was 95.23%, and recall was 84.14% in long-term memory. The authors concluded that the recognition and recall of mixed word passwords had a higher memorability rate than nouns.

show abstract

Password Policies vs. Usability: When Do Users Go "Bananas"?

Cited by 3 publications

References 9 publications

Usability and Security of Knowledge-based Authentication Systems: A State-of-the-Art Review

Usability and Security of Knowledge-based Authentication Systems: A State-of-the-Art Review

Primerjava varnosti in pomnjenja gesel: Ugotavljanje uporabnosti tradicionalne metode in metode igrifikacije

The Effectiveness of Applying Different Strategies on Recognition and Recall Textual Password

Contact Info

Product

Resources

About