• DOI:10.1109/SP.2012.38
Corpus ID: 2156336

Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

@article{Kelley2012GuessA,
  title={Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms},
  author={P. Kelley and Saranga Komanduri and Michelle L. Mazurek and R. Shay and Timothy Vidas and L. Bauer and N. Christin and L. Cranor and J. Hernandez},
  journal={2012 IEEE Symposium on Security and Privacy},
  year={2012},
  pages={523-537}
}

P. Kelley, Saranga Komanduri, +6 authors J. Hernandez

Published 2012

Computer Science

2012 IEEE Symposium on Security and Privacy

Text-based passwords remain the dominant authentication method in computer systems, despite significant advancement in attackers' capabilities to perform password cracking. [...] Key Method We develop an efficient distributed method for calculating how effectively several heuristic password-guessing algorithms guess passwords. Leveraging this method, we investigate (a) the resistance of passwords created under different conditions to guessing, (b) the performance of guessing algorithms under different training…Expand Abstract

View on IEEE

cylab.cmu.edu

Save to Library

Create Alert

Cite

Launch Research Feed