Evaluating the Accuracy of Password Strength Meters using Off-The-Shelf Guessing Attacks

• Type: Article in International Conference Proceedings Book
• Date: 2020

Authors

Pereira, D (Author) Other; Ferreira, JF (Author) Other; Mendes, A (Author) Other

Conference proceedings International

Title: 2020 IEEE International Symposium on Software Reliability Engineering Workshops, ISSRE Workshops, Coimbra, Portugal, October 12-15, 2020

Pages: 237-242

31st IEEE International Symposium on Software Reliability Engineering Workshops, ISSREW 2020

12 October 2020 through 15 October 2020

Indexing

Scopus - 0 Citations

Other information

Authenticus ID: P-00T-ATW

DOI: 10.1109/issrew51248.2020.00079

Abstract (EN): In this paper we measure the accuracy of password strength meters (PSMs) using password guessing resistance against off-the-shelf guessing attacks. We consider 13 PSMs, 5 different attack tools, and a random selection of 60,000 passwords extracted from three different datasets of real-world password leaks. Our results show that a significant percentage of passwords classified as strong were cracked, thus suggesting that current password strength estimation methods can be improved. © 2020 IEEE.

Language: English

Type (Professor's evaluation): Scientific