• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Proceedings of the 2016 IEEE International Conference on Wireless Communications, Signal Processing and Networking >Securing passwords from dictionary attack with character-tree
【24h】

Securing passwords from dictionary attack with character-tree

机译：使用字符树保护密码免受字典攻击

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Most websites use passwords for authenticating user identity and for allowing access to website resources that may contain sensitive information. A large number of people use dictionary words for creating passwords. These user passwords are subjected to one-way hash functions and are stored inside the database as corresponding hash values instead of plaintext. A potential hacker can use brute-force, rainbow table or dictionary attacks to get the input password from the hash values and the most reported real life hacks were done by cracking password hashes using dictionary attack. Currently, users are allowed to register in websites only with passwords that obey the security policies. It is noted that, even though passwords with certain patterns are accepted as strong by the existing policies, they are vulnerable for a dictionary attack based on those patterns. This paper proposes a novel method for ensuring security for passwords against such dictionary attacks. This method, checks strength of the user passwords using a dictionary which is stored as a character tree. This system helps to create strong password hashes that are resistant to dictionary attacks. This approach thus offers advanced and superior protection for passwords from cracking attempts.
机译：大多数网站使用密码来验证用户身份并允许访问可能包含敏感信息的网站资源。许多人使用字典词来创建密码。这些用户密码具有单向哈希函数，并作为对应的哈希值而不是纯文本存储在数据库中。潜在的黑客可以使用蛮力攻击，rainbow table攻击或字典攻击从哈希值中获取输入密码，而报道最多的现实生活中的黑客攻击是通过使用字典攻击来破解密码哈希来完成的。当前，仅允许用户使用遵守安全策略的密码在网站中注册。需要注意的是，即使具有某些模式的密码已被现有策略接受为强密码，但它们很容易受到基于这些模式的字典攻击。本文提出了一种新颖的方法来确保密码的安全性，防止此类字典攻击。该方法使用存储为字符树的字典来检查用户密码的强度。此系统有助于创建可抵抗字典攻击的强密码哈希。因此，此方法可为密码提供高级和出色的保护，以防止密码破解。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号