Password strength: An empirical analysis

M Dell'Amico, P Michiardi… - 2010 Proceedings IEEE …, 2010 - ieeexplore.ieee.org
password recovery tools can drastically reduce the number of attempts needed to guess a
password… the-art attacker will be able to break a password? To answer the former question, we …

Password authentication with insecure communication

L Lamport - Communications of the ACM, 1981 - dl.acm.org
password checking program. (3) By the user's inadvertent disclosure of … password, eg,
choosing an easily guessed password. The third possibility cannot be prevented by any password

[HTML][HTML] A one-time password system

N Haller, C Metz, P Nesser, M Straw - 1998 - rfc-editor.org
… There are two entities in the operation of the OTP one-time password … time password
would not be able to generate the next required password because doing so would mean …

The password life cycle

E Stobert, R Biddle - ACM Transactions on Privacy and Security (TOPS), 2018 - dl.acm.org
… Yet users have many passwords and are expected to create a password for every new …
model of password reuse. We interviewed users to find out about their password coping strategies…

Password security: an empirical study

M Zviran, WJ Haga - Journal of management information systems, 1999 - Taylor & Francis
… This study showed that how a password is chosen, the number of characters in a password,
and password composition (alphanumeric or ASCII) were not affected by the level of data …

A study of probabilistic password models

J Ma, W Yang, M Luo, N Li - 2014 IEEE Symposium on Security …, 2014 - ieeexplore.ieee.org
password strength meters and password cracking utilities. Guess number graphs generated
from password models are a widely used method in password … in password modeling can …

Measuring password guessability for an entire university

ML Mazurek, S Komanduri, T Vidas, L Bauer… - Proceedings of the …, 2013 - dl.acm.org
… , highvalue password data with password sets more typically used in password research. We
… studies, we also compare real password data with commonly used leaked password sets. …

Password security: A case history

R Morris, K Thompson - Communications of the ACM, 1979 - dl.acm.org
This paper describes the history of the design of the password security scheme on a remotely
accessed time-sharing system. The present design was the result of countering observed …

Guess again (and again and again): Measuring password strength by simulating password-cracking algorithms

PG Kelley, S Komanduri, ML Mazurek… - … IEEE symposium on …, 2012 - ieeexplore.ieee.org
… with password-cracking algorithms, and entropy estimates. Our findings advance understanding
of both password-composition policies and metrics for quantifying password security. …

A large-scale study of web password habits

D Florencio, C Herley - Proceedings of the 16th international conference …, 2007 - dl.acm.org
… of a large scale study of password use and password re-use … ’ machines recorded a variety
of password strength, usage and … We get extremely detailed data on password strength, the …