Evaluating the Accuracy of Password Strength Meters using Off-The-Shelf Guessing Attacks

• Tipo: Artigo em Livro de Atas de Conferência Internacional
• Data: 2020

Autores

Pereira, D (Autor) Outra; Ferreira, JF (Autor) Outra; Mendes, A (Autor) Outra

Ata de Conferência Internacional

Título: 2020 IEEE International Symposium on Software Reliability Engineering Workshops, ISSRE Workshops, Coimbra, Portugal, October 12-15, 2020

Páginas: 237-242

31st IEEE International Symposium on Software Reliability Engineering Workshops, ISSREW 2020

12 October 2020 through 15 October 2020

Indexação

Scopus - 0 Citações

Outras Informações

ID Authenticus: P-00T-ATW

DOI: 10.1109/issrew51248.2020.00079

Abstract (EN): In this paper we measure the accuracy of password strength meters (PSMs) using password guessing resistance against off-the-shelf guessing attacks. We consider 13 PSMs, 5 different attack tools, and a random selection of 60,000 passwords extracted from three different datasets of real-world password leaks. Our results show that a significant percentage of passwords classified as strong were cracked, thus suggesting that current password strength estimation methods can be improved. © 2020 IEEE.

Idioma: Inglês

Tipo (Avaliação Docente): Científica