Saranga Komanduri

Publications
Influence

"I regretted the minute I pressed share": a qualitative study of regrets on Facebook

Yang Wang, Gregory Norcie, Saranga Komanduri, Alessandro Acquisti, P. Leon, L. Cranor
Computer Science
SOUPS
20 July 2011

We investigate regrets associated with users' posts on a popular social networking site. Expand

Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

P. Kelley, Saranga Komanduri, +6 authors J. Hernandez
Computer Science
IEEE Symposium on Security and Privacy
20 May 2012

We develop an efficient distributed method for calculating how effectively several heuristic password-guessing algorithms guess passwords. Expand

Of passwords and people: measuring the effect of password-composition policies

Saranga Komanduri, R. Shay, +5 authors Serge Egelman
Computer Science
CHI
7 May 2011

We present a large-scale study that investigates password strength, user behavior, and user sentiment across four password-composition policies and find that a number of commonly held beliefs about password composition and strength are inaccurate. Expand

Encountering stronger password requirements: user attitudes and behaviors

R. Shay, Saranga Komanduri, +5 authors L. Cranor
Computer Science
SOUPS
14 July 2010

A new password policy at Carnegie Mellon University requires users to create a complex password, but most users believe that they are now more secure. Expand

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks

William Melicher, B. Ur, Saranga Komanduri, L. Bauer, N. Christin, L. Cranor
Computer Science
USENIX Annual Technical Conference
10 August 2016

We propose using artificial neural networks to model text passwords' resistance to guessing attacks and explore how different architectures and training methods impact neural networks' guessing effectiveness. Expand

How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation

B. Ur, P. Kelley, +9 authors L. Cranor
Computer Science
USENIX Security Symposium
8 August 2012

We present a 2,931-subject study of password creation in the presence of 14 password meters. Expand

Measuring Real-World Accuracies and Biases in Modeling Password Guessability

B. Ur, Sean M. Segreti, +7 authors R. Shay
Computer Science
USENIX Security Symposium
12 August 2015

We investigate how cracking approaches often used by researchers compare to real-world cracking by professionals, as well as how the choice of approach biases research conclusions. Expand

Measuring password guessability for an entire university

Michelle L. Mazurek, Saranga Komanduri, +6 authors B. Ur
Computer Science
CCS
4 November 2013

We study the single-sign-on passwords used by over 25,000 faculty, staff, and students at a research university with a complex password policy. Expand

Bridging the Gap in Computer Security Warnings: A Mental Model Approach

Cristian Bravo-Lillo, L. Cranor, J. Downs, Saranga Komanduri
Computer Science
IEEE Security & Privacy
1 March 2011

A mental model interview study designed to gain insight into how advanced and novice computer users perceive and respond to computer warnings. Expand

Correct horse battery staple: exploring the usability of system-assigned passphrases

R. Shay, P. Kelley, +6 authors L. Cranor
Computer Science
SOUPS
11 July 2012

We explored the usability of 3- and 4-word system-assigned passphrases in comparison to system-Assigned passwords composed of 5 to 6 random characters, and 8-character system-ASSIGN pronounceable passwords. Expand

Recommended Authors